Pickle
-
Model File Format Security: Pickle, Safetensors, GGUF
Which model formats can execute code when loaded, which only crash, and which are inert. A format-by-format comparison built from the verified CVE record.
-
Malicious Model File Detection: Auditing ML Models
Pickle serialization flaws, PickleScan bypass CVEs, and a practical detection stack for teams pulling models from public repositories like Hugging Face.
-
Hugging Face Model Supply Chain Risk: Pickle Backdoors
How Hugging Face model supply chain risk works: pickle backdoors, the Transformers RCE CVE cluster, why the Hub scanner misses them, and what cuts risk.