Joblib NumpyArrayWrapper Memory Exhaustion PoC

• the issue affects the standard joblib.load() path, not only the legacy compatibility loader
• the crafted file is tiny and contains only Joblib's own wrapper metadata
• pickle.load() of the same file is inert, while joblib.load() reconstructs the wrapper and allocates

• arbitrary code execution
• filesystem read or write outside the loaded artifact
• a bypass of Joblib's documented warning that untrusted joblib.load() inputs are unsafe

• Joblib commit b030e4e1ed6a227c0e587c31b266c03b3b692372
• NumPy 2.3.5
• Python 3.14