You can deploy this model and start earning money today!

ryansecuritytest-fanpierlabs/
keras-hdf5-virtual-dataset-bypass-poc

Name: keras-hdf5-virtual-dataset-bypass-poc
Availability: InStock

Views

No views yet

PoC: Keras HDF5 Virtual Dataset Bypass of External Link Check

Security vulnerability PoC for responsible disclosure via huntr.com.

Vulnerability

Keras _verify_dataset() checks dataset.external but NOT dataset.is_virtual. HDF5 Virtual Datasets transparently reference data from other HDF5 files, bypassing the check.

File: keras/src/saving/saving_lib.py, lines 1051-1061

Files

malicious_virtual_dataset.h5 — HDF5 file with virtual datasets pointing to external file
poc_keras_hdf5_virtual_dataset.py — Full PoC script

Researcher

Ryan — Fan Pier Labs (ryan@fanpierlabs.com)

ryansecuritytest-fanpierlabs/keras-hdf5-virtual-dataset-bypass-poc

PoC: Keras HDF5 Virtual Dataset Bypass of External Link Check

Vulnerability

Files

Researcher

ryansecuritytest-fanpierlabs/
keras-hdf5-virtual-dataset-bypass-poc