You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

SurrealML malformed output normaliser DoS PoC

This gated repository contains a minimal malformed .surml model file used for an authorized security report submitted through Huntr's Model Format Vulnerability program.

PoC artifact

File: surrealml_malformed_output.surml
Size: 50 bytes
SHA-256: aa5c1489139e1514f410008ef84c5854dbe377c05f5b6f1f0b2ef570d06ebc0c
Affected package tested: surrealml==0.0.4

The malformed metadata causes the native SurrealML loader to panic across its C FFI boundary and abort the host process.

Reproduction

Install the affected package in an isolated Windows Python environment:

py -3.12 -m venv .venv
.\.venv\Scripts\python.exe -m pip install surrealml==0.0.4

Run the included direct native-library reproduction:

.\.venv\Scripts\python.exe .\call_c_wrapper.py `
  .\.venv\Lib\site-packages\surrealml\c_wrapper.dll `
  .\surrealml_malformed_output.surml

Expected result: Rust reports panic in a function that cannot unwind and aborts the Python process.

This repository is intended solely for authorized security validation and vendor triage.

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support