#model-format

Model File Format Flaws: Pickle, ONNX, and SafeTensors

Unsafe deserialization in PyTorch's pickle-based format has enabled malicious model distribution for years. This post explains how pickle exploitation