pentester.land· Feb 21, 2024· by Eoin Wickens (@enwckns), Kasimir Schulz (@Abraxus7331)

Hijacking Safetensors Conversion On Hugging Face

Open Original Article ↗
Target Program: Hugging Face
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Malicious AI model#Supply chain attack