Hugging Face's logo

katsuiy
/
modelscan-savedmodel-pbtxt-bypass-poc

Other
TF-Keras
security
modelscan
tensorflow
savedmodel
proof-of-concept
Model card Files
xet
 Community
How to use from the
Use from the
TF-Keras library
# Gated model: Login with a HF token with gated access permission
hf auth login
# Note: 'keras<3.x' or 'tf_keras' must be installed (legacy)
# See https://github.com/keras-team/tf-keras for more details.
from huggingface_hub import from_pretrained_keras

model = from_pretrained_keras("katsuiy/modelscan-savedmodel-pbtxt-bypass-poc")

You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

ModelScan SavedModel Format Routing PoC

This repository contains benign TensorFlow SavedModel artifacts for a private security report submitted through huntr.

Contents:

  • readfile_pb/: control SavedModel using saved_model.pb
  • readfile_pbtxt/: candidate SavedModel using saved_model.pbtxt
  • savedmodel_pbtxt_probe.py: local generator and loader verification helper

The artifacts are intended for static scanner verification. The exported TensorFlow signature should not be executed as part of basic triage.

The full vulnerability details, impact statement, and reproduction commands are included in the private huntr report.

Downloads last month
-
Inference Providers NEW
Other
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support