Vulnerability in Safetensors conversion space
Just came across an article highlighting a vulnerability in the Hugging Face Safetensors conversion service.HiddenLayer | Security for AI – 21 Feb 24Silent Sabotage | HiddenLayer ResearchIn this blog, we show how an attacker could compromise the Hugging Face Safetensors conversion space and its associated service bot.It raises important questions about security in downloading and using models from huggingface, even in safetensors format. Curious to hear thoughts and ideas on, As an enterprise, how do we ensure the model files we download and use are secure amidst these vulnerabilities?