HF RL Explorer

Big security vulnerability

Big security vulnerability: a task in MiMo-V2.6-RL-oss: Agentic RL Environments (MiMo RL release). Hi, I've just realised that it is very easy to create a big security vulnerability when using this package to upload files (I almost did this on my site). Suppose you have JSON body parsing enabled…

The task

Hi, I've just realised that it is very easy to create a big security vulnerability when using this package to upload files (I almost did this on my site). Suppose you have JSON body parsing enabled on a POST or PUT route, say '/upload-files', as well as multipart parsing. This…

Part of XiaomiMiMo/MiMo-V2.6-RL-oss.