Skip to content

Conversation

anupamme
Copy link

Context and Purpose:

This PR automatically remediates a security vulnerability:

  • Description: Functions reliant on pickle can result in arbitrary code execution. Consider using fickling or switching to a safer serialization method
  • Rule ID: trailofbits.python.pickles-in-pandas.pickles-in-pandas
  • Severity: HIGH
  • File: examples/benchmarks/TFT/tft.py
  • Lines Affected: 320 - 320

This change is necessary to protect the application from potential security risks associated with this vulnerability.

Solution Implemented:

The automated remediation process has applied the necessary changes to the affected code in examples/benchmarks/TFT/tft.py to resolve the identified issue.

Please review the changes to ensure they are correct and integrate as expected.

@github-actions github-actions bot added the waiting for triage Cannot auto-triage, wait for triage. label May 30, 2025
Copy link

@Abhijais4896 Abhijais4896 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

for attr in drop_attrs:
orig_attr[attr] = getattr(self, attr)
setattr(self, attr, None)
super(TFTModel, self).to_pickle(path)
super(TFTModel, self).to_hdf(path, key="data")
for attr in drop_attrs:
setattr(self, attr, orig_attr[attr])

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
waiting for triage Cannot auto-triage, wait for triage.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants