PyCQA / bandit

Bandit is a tool designed to find common security issues in Python code.
https://bandit.readthedocs.io
Apache License 2.0
6.5k stars 610 forks source link

Pytorch Load / Save Plugin (#1114) #1176

Closed ericwb closed 1 month ago

ericwb commented 1 month ago

This plugin checks for the use of torch.load and torch.save. Using torch.load with untrusted data can lead to arbitrary code execution, and improper use of torch.save might expose sensitive data or lead to data corruption.

for more information, see https://pre-commit.ci

for more information, see https://pre-commit.ci