Hugging Face's logo

katsuiy
/
modelscan-savedmodel-pbtxt-bypass-poc

Other
TF-Keras
security
modelscan
tensorflow
savedmodel
proof-of-concept
Model card Files
xet
 Community

You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

ModelScan SavedModel Format Routing PoC

This repository contains benign TensorFlow SavedModel artifacts for a private security report submitted through huntr.

Contents:

  • readfile_pb/: control SavedModel using saved_model.pb
  • readfile_pbtxt/: candidate SavedModel using saved_model.pbtxt
  • savedmodel_pbtxt_probe.py: local generator and loader verification helper

The artifacts are intended for static scanner verification. The exported TensorFlow signature should not be executed as part of basic triage.

The full vulnerability details, impact statement, and reproduction commands are included in the private huntr report.

Downloads last month
-
Inference Providers NEW
Other
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support