Downloads · 30 days
0
ryansecuritytest-fanpierlabs/poc-torchserve-model-archiver-traversal
poc-torchserve-model-archiver-traversal is a machine learning model from ryansecuritytest-fanpierlabs. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for pytorch.
modelname parameter used in os.path.join(tempdir, modelname) without validation → arbitrary directory deletion via shutil.rmtree + file write.
Downloads · 30 days
0
Access
Public
Updated Apr 3, 2026
Repo size
—
Likes
0
Public
Click a slice to open those files.
.py1.7 KB · 48%
From the Hugging Face model README
model_name parameter used in os.path.join(tempdir, model_name) without
validation → arbitrary directory deletion via shutil.rmtree + file write.
Affected: model_archiver/model_packaging_utils.py:158