erroneo.us
Search all guides⌘K

Digest · Tuesday

Security digest: February 27, 2024

1 editorial brief and 2 critical advisories.

All digests · RSS · Markdown

Take stock

  • Check exposure: Malicious Hugging Face Models: Pickle Code Execution. Teams and researchers that download PyTorch .bin/.pt/.pkl or Keras models from arbitrary Hugging Face accounts and load them with full pickle deserialization, especially on machines holding credentials.
  • Go: 1 critical advisory (github.com/edgelesssys/marblerun). Check with govulncheck ./....
  • Maven: 1 critical advisory (org.apache.james:james-server). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId>.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Check exposure

· Malicious package

Malicious Hugging Face Models: Pickle Code Execution

This is a standing risk, not a one-off bug: loading a pickle-based model from an untrusted repo is running that author's code, so check how your pipelines load third-party weights.

Must act: Teams and researchers that download PyTorch .bin/.pt/.pkl or Keras models from arbitrary Hugging Face accounts and load them with full pickle deserialization, especially on machines holding credentials.

Can relax: People who only load safetensors weights or models from organizations they trust, and who run PyTorch 2.6 or later with the default weights_only=True loading.

  1. Inventory where your code loads third-party models and which formats it uses.
  2. Prefer safetensors weights; refuse .bin/.pt/.pkl files from unknown authors.
  3. Upgrade to PyTorch 2.6 or later, or pass weights_only=True explicitly; never set weights_only=False on files you did not produce.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 2

GitHub-reviewed advisories rated critical, published this day (Pacific time).

Go 1

Check: govulncheck ./...

Maven 1

Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>