Instructions to use surrealgrain/tf-savedmodel-path-traversal-poc with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Libraries
- TF-Keras
How to use surrealgrain/tf-savedmodel-path-traversal-poc with TF-Keras:
# Note: 'keras<3.x' or 'tf_keras' must be installed (legacy) # See https://github.com/keras-team/tf-keras for more details. from huggingface_hub import from_pretrained_keras model = from_pretrained_keras("surrealgrain/tf-savedmodel-path-traversal-poc") - Notebooks
- Google Colab
- Kaggle
Upload README.md with huggingface_hub
Browse files
README.md
CHANGED
|
@@ -4,11 +4,9 @@ license: mit
|
|
| 4 |
|
| 5 |
# TensorFlow SavedModel Path Traversal PoC
|
| 6 |
|
| 7 |
-
Proof-of-concept for path traversal via AssetFileDef.filename in TensorFlow SavedModel loading.
|
| 8 |
|
| 9 |
-
**Vulnerability**: tensorflow/python/trackable/asset.py - unsanitized ../ in asset filenames.
|
| 10 |
-
|
| 11 |
-
## Usage (security research only)
|
| 12 |
|
| 13 |
```python
|
| 14 |
import tensorflow as tf
|
|
|
|
| 4 |
|
| 5 |
# TensorFlow SavedModel Path Traversal PoC
|
| 6 |
|
| 7 |
+
Proof-of-concept for path traversal via `AssetFileDef.filename` in TensorFlow's SavedModel loading.
|
| 8 |
|
| 9 |
+
**Vulnerability**: `tensorflow/python/trackable/asset.py` - unsanitized `../` in asset filenames.
|
|
|
|
|
|
|
| 10 |
|
| 11 |
```python
|
| 12 |
import tensorflow as tf
|