Views
No views yet
foundation-model-stack/fastsafetensors
(HEAD 8d35826). Reported via huntr's Model File Vulnerability program.model.safetensors is a ~80-byte safetensors file whose header carries a tensor
entry with an invalid dtype. Loading it crashes the parser with an uncaught
ValueError, before any tensor data is read. This affects any app using
fastsafetensors, including vLLM / SGLang started with --load-format fastsafetensors.1from fastsafetensors.common import SafeTensorsMetadata
2from fastsafetensors.frameworks import get_framework_op
3SafeTensorsMetadata.from_file("model.safetensors", get_framework_op("pytorch"))
4# -> ValueError: 'NOTADTYPE' is not a valid DType (uncaught -> loader crash)