---
license: mit
tags:
  - security
  - poc
  - joblib
  - model-format
---

# Joblib trailing-bytes DoS PoC

This repository contains a proof-of-concept `.joblib` artifact for a private
security disclosure.

Files:

- `hf-poc-model.joblib`: malformed Joblib artifact
- `reproduce.py`: minimal reproduction script

Reproduction:

```bash
python -m pip install joblib==1.5.3
python reproduce.py
```

Expected result:

- `joblib.load("hf-poc-model.joblib")` eventually raises `MemoryError`
- the same malformed gzip payload fails quickly with Python stdlib `gzip`