18 Total Vulnerabilities found with AISHIELD Static Scanner
One Critical Vulnerability:
https://huggingface.co/Mozilla/distilvit/blob/main/onnx/decoder_model_merged_fp16.onnx
AIS-ON-R-02 --> ONNX Corrupted or Manipulated File Format --> ONNX file format is either corrupted or manipulated, Leading to unexpected behaviour. ONNX file format is either corrupted or manipulated
16 Medium:
https://huggingface.co/Mozilla/distilvit/blob/main/onnx/____.onnx
AIS-ON-B-01 --> ONNX Architecture Backdoor --> A backdoor vulnerability within ONNX model files, potentially allowing hidden operations to be triggered
https://huggingface.co/Mozilla/distilvit/blob/main/training_args.bin
AIS-PK-D-01 --> Pickle Deserialization --> A vulnerability in the deserialization of Pickle files, which could lead to arbitrary code execution if files are manipulated. accelerate.state - PartialState
1 Low:
https://huggingface.co/Mozilla/distilvit/blob/main/pytorch_model.bin
AIS-PK-D-01 --> Pickle Deserialization --> A vulnerability in the deserialization of Pickle files, which could lead to arbitrary code execution if files are manipulated. collections - OrderedDict