Instructions to use Pyraun/modelscan-printv2-bypass-poc with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Libraries
- TF-Keras
How to use Pyraun/modelscan-printv2-bypass-poc with TF-Keras:
# Note: 'keras<3.x' or 'tf_keras' must be installed (legacy) # See https://github.com/keras-team/tf-keras for more details. from huggingface_hub import from_pretrained_keras model = from_pretrained_keras("Pyraun/modelscan-printv2-bypass-poc") - Notebooks
- Google Colab
- Kaggle
metadata
tags:
- security
- poc
- tensorflow
- modelscan
- vulnerability-research
extra_gated_prompt: >-
This repository contains security proof-of-concept SavedModels for a
coordinated-disclosure vulnerability report against ProtectAI ModelScan.
Access is gated and granted only to authorized reviewers.
extra_gated_fields:
Organization: text
I am an authorized reviewer (Protect AI / maintainer): checkbox
PoC: ProtectAI ModelScan SavedModel unsafe-op scan bypass
Impact / honest ceiling
This is a detection bypass, not a memory-safety or code-execution bug.
Affected versions
ModelScan 0.8.8 (latest at time of report), default settings, stock
pip install modelscan. Models built with TensorFlow 2.21.0.
Disclosure
This artifact is part of an authorized coordinated-disclosure report (Huntr
protectai/modelscan). Access is gated to authorized reviewers only.