lllyasviel / lllyasviel/ControlNet

Your machine may be at risk if the file contains malicious content.

Open
#357 4 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
34.1k
Forks
3k
PR merge metrics
No merged PRs in 30d

Description

> Loading config D:\Program Files\stable-diffusion-webui\extensions\sd-webui-controlnet\annotator\oneformer\configs/ade20k/oneformer_swin_large_IN21k_384_bs16_160k.yaml with yaml.unsafe_load. Your machine may be at risk if the file contains malicious content.
> Loading config D:\Program Files\stable-diffusion-webui\extensions\sd-webui-controlnet\annotator\oneformer\configs/ade20k\Base-ADE20K-UnifiedSegmentation.yaml with yaml.unsafe_load. Your machine may be at risk if the file contains malicious content.

What's up with that?

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the two OneFormer configuration files named in the report and trace where Python's yaml.unsafe_load is called. Determine why these files use that loader and whether the warning indicates an unsafe project behavior; done means documenting the finding and identifying a specific, justified change if one is needed.

Written by the indexing model from the issue text.

Assessment

Tech stack
python, yaml
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.