YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

huggingface_hub Sharded Checkpoint Path Traversal PoC

This model demonstrates a path traversal vulnerability in huggingface_hub's _load_sharded_checkpoint() function.

The model.safetensors.index.json contains a weight_map entry with ../../ path traversal in the shard filename. When loaded, os.path.join() resolves the traversal, allowing reading of arbitrary files outside the model directory.

Downloads last month

-

Downloads are not tracked for this model. How to track
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support