README.md

metadata

license: mit
tags:
  - security
  - poc
  - joblib
  - model-format

Joblib trailing-bytes DoS PoC

This repository contains a proof-of-concept .joblib artifact for a private security disclosure.

Files:

• hf-poc-model.joblib: malformed Joblib artifact
• reproduce.py: minimal reproduction script

Reproduction:

python -m pip install joblib==1.5.3
python reproduce.py

Expected result:

• joblib.load("hf-poc-model.joblib") eventually raises MemoryError
• the same malformed gzip payload fails quickly with Python stdlib gzip