Downloads · 30 days
7
25% of all-time downloads
transformers-shard-traversal-poc
ryansecuritytest-fanpierlabs/transformers-shard-traversal-poc
transformers-shard-traversal-poc is a machine learning model from ryansecuritytest-fanpierlabs. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
Security vulnerability PoC for responsible disclosure via huntr.com.
All-time downloads
28
Public
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py5.6 KB · 68%
At a glance
- License
- mit
- Model type
- llama
- Access
- Public
- Created
- Mar 30, 2026
- Updated
- Mar 30, 2026
- SHA
- 698e1c31
Model card
From the Hugging Face model README
PoC: HuggingFace Transformers Sharded Checkpoint Path Traversal
Security vulnerability PoC for responsible disclosure via huntr.com.
Vulnerability
get_checkpoint_shard_files() uses unsanitized filenames from sharded index JSON in os.path.join().
Path traversal sequences in weight_map values escape the model directory.
File: transformers/utils/hub.py, lines 867-874
Files
model.safetensors.index.json— Crafted index with traversal payloadconfig.json— Minimal model configpoc_transformers_shard_traversal.py— Full PoC script
Researcher
Ryan — Fan Pier Labs ([email protected])
- Type
- llama
- License
- mit
- Created
- Mar 30, 2026
- Updated
- Mar 30, 2026