rez0/joblib-compression-scanner-bypass

Logistic Regression (Compressed)

Simple logistic regression saved with joblib compression.

Security Research

This model demonstrates that compressed joblib files (.joblib.gz, .joblib.bz2, etc.) bypass both modelscan v0.8.8 and picklescan v1.0.3 security scanners.

This is a security research PoC for responsible disclosure via huntr.

Reproduction

import joblib
# This will execute arbitrary code - scanner bypass confirmed
model = joblib.load("model.joblib.gz")