bandit
bandit copied to clipboard
Pytorch Load / Save Plugin
This plugin checks for the use of torch.load and torch.save.
Using torch.load with untrusted data can lead to arbitrary code execution,
and improper use of torch.save might expose sensitive data or lead to data
corruption.
Bit of cleaning up to do, will get onto next week
Closing and reopening to trigger precommit ci to auto fix this for you
@sigmavirus24 / @ericwb I think I have reviewed most of the points now, fancy taking a second sweep?
sorry for late action, changes accepted @ericwb