🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #Remote Code Execution

📦 项目名称: trustload
👤 项目作者: jay-tank
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-08-12 03:39:53

📝 项目描述:
A zero-config Python AST linter that flags unsafe loading of an ML model/artifact (torch.load without weights_only, pickle/joblib/dill.load, np.load allow_pickle, keras load_model, yaml.load) - arbitrary code execution (CWE-502), the model-supply-chain RCE class. Points you at weights_only=True / safetensors.

🔗 点击访问项目地址
 
 
Back to Top