Security PoC — imagefolder metadata path traversal (huntr MFV, .csv)
Minimal proof-of-concept dataset for a path-traversal / arbitrary-file-read in huggingface/datasets
imagefolder/audiofolder metadata resolution. The metadata.csv file_name column escapes the dataset
directory. Reproduce locally with load_dataset(...) + save_to_disk(...); the traversed file's bytes are
embedded into the saved dataset. Reported responsibly via huntr. Contains no exploit code — only a benign
image and a metadata file demonstrating the resolution flaw.
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support