onnxruntime t5_helper.load_model() ACE PoC

onnxruntime/transformers/models/t5/t5_helper.py line 91:

model.load_state_dict(torch.load(state_dict_path))

Bare torch.load() without weights_only parameter enables ACE when loading malicious T5 model state dicts.

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support