1249 matches found
alibi-detect
Alibi Detect 是一个源码可用的 Python 库，专注于异常值 、对抗性 和漂移 检测。该包旨在覆盖适用于表格数据、文本、图像和时间序列的在线和离线检测器。漂移检测同时支持 TensorFlow 和 PyTorch 后端。 文档 如需了解更多有关在生产环境中监测异常值和分布的重要性的背景信息，请查看来自 ICML 2020 研讨会 机器学习系统的部署与监测挑战 上的这个演讲，该演讲基于论文生产环境中模型的监测与可解释性并引用了 Alibi Detect。...
CVE-2024-5452
CVE-2024-5452 01. RCE与pytorch-lightning概述 1 RCE与pytorch-lightning概述 RCE（Remote Code Execution，远程代码执行）是一种允许攻击者在远程系统或应用程序内执行任意代码的漏洞，对应CWE-94：代码生成控制不当（'代码注入'）。 PyTorch Lightning是一个基于PyTorch的库，帮助简化深度学习模型的训练管理；DeepDiff则是一个用于比较两个Python对象并分析差异的库。...
Agentic-CLIP-Benchmark
Agentic-CLIP-Benchmark: Evaluación Zero-Shot en CIFAR-10 -green.svg Este proyecto implementa un pipeline robusto y automatizado para evaluar el modelo CLIP ViT-B/32 de OpenAI en el conjunto de prueba completo de CIFAR-10 10,000 imágenes. Desarrollado mediante un flujo de trabajo AI-Native Trae ID...
saffron
Saffron-1：面向LLM安全保证的推理扩展 📖 论文 🛠️ 依赖 代码在以下依赖环境中测试通过： Python 3.12.3 CUDA 12.2 typingextensions==4.14.0 numpy==2.2.6 torch==2.5.1 huggingfacehub==0.30.2 accelerate==1.1.1 datasets==3.1.0 evaluate==0.4.3 transformers==4.45.2 peft==0.15.0 deepspeed==0.16.7 🚀 用法 请参见 saffron.py。更多描述即将推出... 📊 结果...
foolbox
home: true heroImage: /logo.png heroText: Foolbox tagline: "Foolbox：在 PyTorch、TensorFlow 和 JAX 中快速发起对抗攻击，以基准测试机器学习模型的鲁棒性" actionText: 开始使用 → actionLink: /guide/ features: title: 原生性能 details: Foolbox 3 基于 EagerPy 构建，可原生运行于 PyTorch、TensorFlow 和 JAX 中。 title: 最先进的攻击方法 details: Foolbox...
netsentryx
NetSentryx PRO 🛡️ AI 驱动的高性能实时网络可观测性与威胁检测引擎 NetSentryx PRO 是一个下一代、事件驱动的网络监控与威胁情报平台。它结合了基于规则的签名与 PyTorch 深度自编码器，提供低于 10ms 的数据包和 netflow 异常检测、自动化多渠道告警（Slack、Discord、Email）以及交互式实时 SOC 仪表板。 🏗️ 系统架构 以下流程图展示了数据摄取、实时深度学习推理、告警流水线和 WebSocket 可视化层： root@kitploit: flowchart TD subgraph Capture & Ingestion...
PYSEC-2026-3970 PyTorch Lightning path traversal vulnerability
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/uploadfile/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the pluginserver, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path...
PYSEC-2026-3974 Remote code execution in pytorch lightning
A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...
PYSEC-2026-3971 PyTorch Lightning denial of service vulnerability
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...
PyTorch Lightning denial of service vulnerability
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...
PyTorch Lightning path traversal vulnerability
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/uploadfile/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability CWE-502 in the checkpoint loading mechanism. The LightningModule.loadfromcheckpoint method, which is commonly used to load saved model states, internally calls torch.load without setting the...
Remote code execution in pytorch lightning
A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...
PYSEC-2026-3972 PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability CWE-502 in the checkpoint loading mechanism. The LightningModule.loadfromcheckpoint method, which is commonly used to load saved model states, internally calls torch.load without setting the...
PYSEC-2026-3975 pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the pluginserver, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path...
Occ
Segmentación de artículos prohibidos mediante modelado bicapa consciente de la oclusión ICME 2025 Implementación oficial en PyTorch de la segmentación de artículos prohibidos mediante modelado bicapa consciente de la oclusión. Enlace del artículo: IEEE, Arxiv. Cómo empezar Dependencias El código ...
PT-2026-89725
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with pat...