Downloads · 30 days
0
joblib-legacy-path-traversal-poc
htdy7703/joblib-legacy-path-traversal-poc
joblib-legacy-path-traversal-poc is a machine learning model from htdy7703. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for joblib.
This repository contains a minimal proof-of-concept for the following scoped claim:
Access
Public
Updated Jul 7, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 42%
At a glance
- Library
- joblib
- Access
- Public
- Created
- Jul 7, 2026
- Updated
- Jul 7, 2026
- SHA
- 7ca7f94a
Model card
From the Hugging Face model README
Joblib legacy compatibility path traversal PoC
This repository contains a minimal proof-of-concept for the following scoped claim:
Path traversal in legacy NDArrayWrapper companion-file loading allows out-of-bundle local NumPy array reads
What this PoC shows:
- a legacy Joblib compatibility artifact can set
NDArrayWrapper.filenameto../../secrets/private.npy joblib.load()follows that relative path through the legacy compatibility loader- the load returns the contents of an external
.npyfile outside the artifact directory
What this PoC does not show:
- arbitrary local file read in general
- a new default
joblib.load()unsafe-deserialization issue - impact on non-legacy artifacts generated by current
joblib.dump()
Runtime used:
- joblib commit
b030e4e1ed6a227c0e587c31b266c03b3b692372 - current development version line:
1.6.dev0 - numpy installed
Files:
reproduce.py: deterministic repro that creates the external.npy, builds the legacy artifact, and shows the out-of-bundle read
- Library
- joblib
- Created
- Jul 7, 2026
- Updated
- Jul 7, 2026