Posts tagged #pickle
-
Pickle Is a CVE Factory; Type Stubs Are the Gate
Every ML project eventually loads a pickle file. This is a problem: pickle can execute arbitrary Python on deserialization. Here is how falcon-secure uses Python type stubs to make unsafe loads a static type error.