Hugging Face's logo

ivanphuc
/
Poc-model.joblib

Joblib
security
poc
model-format
Model card Files
xet
 Community

You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

Joblib trailing-bytes DoS PoC

This repository contains a proof-of-concept .joblib artifact for a private security disclosure.

Files:

  • hf-poc-model.joblib: malformed Joblib artifact
  • reproduce.py: minimal reproduction script

Reproduction:

python -m pip install joblib==1.5.3
python reproduce.py

Expected result:

  • joblib.load("hf-poc-model.joblib") eventually raises MemoryError
  • the same malformed gzip payload fails quickly with Python stdlib gzip
Downloads last month

-

Downloads are not tracked for this model. How to track
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support