Downloads · 30 days
0
keras-hdf5-poc
joerogan7722/keras-hdf5-poc
keras-hdf5-poc is a machine learning model from joerogan7722. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for keras. The card lists the license as mit.
This repository contains a Proof of Concept (PoC) to demonstrate a Stored Code Injection vulnerability in the Keras HDF5 model format.
Access
Public
Updated Nov 27, 2025
Repo size
13.3 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.h513.3 KB · 76%
At a glance
- Library
- keras
- License
- mit
- Access
- Public
- Created
- Nov 27, 2025
- Updated
- Nov 27, 2025
- SHA
- c4c78f3c
Model card
From the Hugging Face model README
Keras HDF5 Security Research Artifact
This repository contains a Proof of Concept (PoC) to demonstrate a Stored Code Injection vulnerability in the Keras HDF5 model format.
Intended Use: This artifact is for educational purposes, security research, and bug bounty verification only. It demonstrates how Lambda layers in legacy HDF5 files can trigger code execution upon load.
Contents:
malicious_model.h5: A Keras model containing a Lambda layer with injected bytecode.keras_injector.py: The generation script used to create the artifact (for verification).
Verification:
Loading this model with safe_mode=False will trigger a safe network callback to verify execution flow.
- Library
- keras
- License
- mit
- Created
- Nov 27, 2025
- Updated
- Nov 27, 2025