Downloads · 30 days
3
4% of all-time downloads
SinhSinhAn/keras-ace-research
keras-ace-research is a machine learning model from SinhSinhAn. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for keras. The card lists the license as mit.
Downloads · 30 days
3
4% of all-time downloads
All-time downloads
69
Public
Repo size
—
Likes
0
Public
Click a slice to open those files.
.md7.2 KB · 74%
From the Hugging Face model README
Security research proof-of-concept for responsible disclosure via huntr.com.
Do not load this model outside of a sandboxed environment.
Demonstrates ACE via unrestricted importlib deserialization in Keras < 3.9.0.
Reproduction steps:
pip install keras==3.8.0 Set KERAS_BACKEND=jax (or tensorflow/torch) Download malicious_image_classifier.keras from the HuggingFace repo Run: python3 -c "import keras; keras.models.load_model('malicious_image_classifier.keras', safe_mode=True)" Observe: id and hostname output written to /tmp/keras_ace_output.txt