YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
ONNX ReDoS PoC (CWE-1333)
Vulnerability
The RegexFullMatch reference operator uses Python re.compile() on patterns
from the ONNX model. Python's re engine is vulnerable to catastrophic
backtracking. The ONNX spec mandates re2 (linear time), but the implementation
uses re (exponential).
Reproduce
pip install onnx
python poc.py
Pattern (a+)+b with input "aaa..." causes exponential CPU consumption.
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support