Hugging Face's logo

xiaoyaoes
/
darts-pickle-rce

Model card Files
xet
 Community

YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

Darts Pickle RCE PoC

Reported to huntr by xiaoyaoes

Vulnerability

3 unprotected pickle.load() paths:

  1. darts/models/forecasting/forecasting_model.py:2744
  2. darts/models/forecasting/forecasting_model.py:2746
  3. darts/timeseries.py:1551

Zero protection. Loading a malicious .pkl file → RCE.

Downloads last month

-

Downloads are not tracked for this model. How to track
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support