Downloads · 30 days
0
keras-hdf5-virtual-dataset-bypass-poc
ryansecuritytest-fanpierlabs/keras-hdf5-virtual-dataset-bypass-poc
keras-hdf5-virtual-dataset-bypass-poc is a machine learning model from ryansecuritytest-fanpierlabs. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
Security vulnerability PoC for responsible disclosure via huntr.com.
Access
Public
Updated Mar 30, 2026
Repo size
15.1 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.h57.6 KB · 51%
At a glance
- License
- mit
- Access
- Public
- Created
- Mar 30, 2026
- Updated
- Mar 30, 2026
- SHA
- 357790b0
Model card
From the Hugging Face model README
PoC: Keras HDF5 Virtual Dataset Bypass of External Link Check
Security vulnerability PoC for responsible disclosure via huntr.com.
Vulnerability
Keras _verify_dataset() checks dataset.external but NOT dataset.is_virtual.
HDF5 Virtual Datasets transparently reference data from other HDF5 files, bypassing the check.
File: keras/src/saving/saving_lib.py, lines 1051-1061
Files
malicious_virtual_dataset.h5— HDF5 file with virtual datasets pointing to external filepoc_keras_hdf5_virtual_dataset.py— Full PoC script
Researcher
Ryan — Fan Pier Labs ([email protected])
- License
- mit
- Created
- Mar 30, 2026
- Updated
- Mar 30, 2026