scruge1 opened a new pull request, #18925: URL: https://github.com/apache/tvm/pull/18925
## Summary `pickle_memoize` loads cached pickle files via `pickle.load()` without any integrity verification or user warning. If an attacker can write to the cache directory, they can inject malicious pickle payloads that execute arbitrary code on next load. ## Fix Adds a `UserWarning` when loading pickle cache files to alert users about the security risk. ## Related Huntr security vulnerability report (CWE-502: Deserialization of Untrusted Data) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
