CVE: Pending
CVSS: 9.8 Critical
Target: joblib/joblib
Proof of concept demonstrating arbitrary code execution via crafted .joblib file.
NumpyUnpickler has zero security restrictions — no find_class override, no opcode filtering.
poc_joblib_ace.joblib — 34-byte malicious .joblib file (executes id)
poc_joblib_ace.py — PoC generator script
python3 -c "import joblib;… See the full description on the dataset page:
https://huggingface.co/datasets/0xiviel/poc-joblib-ace.
