| license: mit | |
| tags: | |
| - security | |
| - poc | |
| - joblib | |
| - model-format | |
| # Joblib trailing-bytes DoS PoC | |
| This repository contains a proof-of-concept `.joblib` artifact for a private | |
| security disclosure. | |
| Files: | |
| - `hf-poc-model.joblib`: malformed Joblib artifact | |
| - `reproduce.py`: minimal reproduction script | |
| Reproduction: | |
| ```bash | |
| python -m pip install joblib==1.5.3 | |
| python reproduce.py | |
| ``` | |
| Expected result: | |
| - `joblib.load("hf-poc-model.joblib")` eventually raises `MemoryError` | |
| - the same malformed gzip payload fails quickly with Python stdlib `gzip` | |