modelscan

ModelScan：防范模型序列化攻击 机器学习（ML）模型在互联网上公开共享，并在团队内部和团队之间共享。基础模型的兴起导致公开的 ML 模型越来越多地被用于进一步的训练/微调。ML 模型越来越多地被用来做出关键决策，并为关键任务应用提供支持。 尽管如此，模型尚未像收件箱中的 PDF 文件那样受到严格的扫描。 这种情况需要改变，而合适的工具是第一步。 ModelScan 是 Protect AI 的一个开源项目，用于扫描模型以确定它们是否包含不安全的代码。它是第一个支持多种模型格式的模型扫描工具。ModelScan 目前支持：H5、Pickle 和 SavedModel...

Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

DetailsThere's a parsing logic error in picklescan and modelscan while trying to deal with opcode STACKGLOBAL.Function listglobals when handling STACKGLOBAL at position n, it is expected to track two arguments but in wrong range. The loop only consider the range from 1 to n-1 but forgets to...

PYSEC-2026-1788 Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

Details There's a parsing logic error in picklescan and modelscan while trying to deal with opcode STACKGLOBAL. Function listglobals when handling STACKGLOBAL at position n, it is expected to track two arguments but in wrong range. The loop only consider the range from 1 to n-1 but forgets to...

modelscan-bypass-poc

⚠️ ModelScan Bypass PoC — Security Research WARNING: This...

modelscan-bypass-poc

⚠️ ModelScan Bypass PoC — Security Research WARNING: This...

Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

Details There's a parsing logic error in picklescan and modelscan while trying to deal with opcode STACKGLOBAL. Function listglobals when handling STACKGLOBAL at position n, it is expected to track two arguments but in wrong range. The loop only consider the range from 1 to n-1 but forgets to...

GHSA-9GVJ-PP9X-GCFR Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

Details There's a parsing logic error in picklescan and modelscan while trying to deal with opcode STACKGLOBAL. Function listglobals when handling STACKGLOBAL at position n, it is expected to track two arguments but in wrong range. The loop only consider the range from 1 to n-1 but forgets to...

PT-2025-34324 · Pypi · Picklescan

Details There's a parsing logic error in picklescan and modelscan while trying to deal with opcode STACK GLOBAL. Function list globals when handling STACK GLOBAL at position n, it is expected to track two arguments but in wrong range. The loop only consider the range from 1 to n-1 but forgets to...