Downloads · 30 days
10
24% of all-time downloads
modelscan-regularizer-constraint-bypass
xiaoyaoes/modelscan-regularizer-constraint-bypass
modelscan-regularizer-constraint-bypass is a machine learning model from xiaoyaoes. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for keras.
ModelScan only checks Lambda layers. Regularizers and constraints embedded inside layer configs (kernelregularizer, biasregularizer, kernelconstraint, biasconstraint) are completely ignored.
All-time downloads
42
Public
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.keras17.6 KB · 88%
At a glance
- Library
- keras
- Access
- Public
- Created
- May 30, 2026
- Updated
- May 30, 2026
- SHA
- 9e64981e
Model card
From the Hugging Face model README
ModelScan Regularizer & Constraint from_config Bypass
What This Is
ModelScan only checks Lambda layers. Regularizers and constraints embedded inside layer configs (kernel_regularizer, bias_regularizer, kernel_constraint, bias_constraint) are completely ignored.
This .keras file uses both a custom regularizer and a custom constraint, each with malicious from_config(). ModelScan reports 0 Issues. Loading triggers both payloads.
Verify
python3 poc.py
Attack Surface
Layer config sub-fields not scanned by ModelScan:
kernel_regularizer/bias_regularizer/activity_regularizerkernel_constraint/bias_constraintkernel_initializer/bias_initializer(separate bypass)
Disclosure
Submitted to ProtectAI via huntr.dev.
- Library
- keras
- Created
- May 30, 2026
- Updated
- May 30, 2026