Is iitolstykh/YOLO-Face-Person-Detector safe to load?
CyberXYZ rates iitolstykh/YOLO-Face-Person-Detector HIGH, driven by torch 2.5.1 · GHSA-53q9-r3pm-6pq6. It depends on 137 tracked packages, and 4 carry advisories. It ships Python that runs when the model is loaded (trust_remote_code). A mixed serialization signal is recorded for it; the model_load_safety tool gives the per-file verdict.
HIGHDeclared install pins version-matched high/critical advisories: torch 2.5.1
7 more findings on this model.
- Author
- iitolstykh
- Task
- object-detection
- Loader
- ultralytics
- License
- agpl-3.0
- Downloads
- 83,802
- Remote code
- ships Python that runs on load (trust_remote_code)
12 direct, 10 with findings, 130 reachable
| Package | Evidence | Advisories | Worst |
|---|---|---|---|
| torch | direct, install | 13 | CRITICAL |
| pillow | direct, runtime | 147 | none pinned |
Is iitolstykh/YOLO-Face-Person-Detector safe to load?
CyberXYZ does not call a model safe in absolute terms. It rates iitolstykh/YOLO-Face-Person-Detector HIGH, driven by torch 2.5.1 · GHSA-53q9-r3pm-6pq6. That covers its dependencies and how it loads, not every file it ships, so treat any check that did not run as unverified and check the exact files before you load them.
What does iitolstykh/YOLO-Face-Person-Detector depend on?
CyberXYZ tracks 137 dependencies for iitolstykh/YOLO-Face-Person-Detector, 12 of them direct. 4 carry advisories. They include torch and pillow. A free account lists all of them.
Does iitolstykh/YOLO-Face-Person-Detector run code when it loads?
Yes, it can. iitolstykh/YOLO-Face-Person-Detector ships Python code and HuggingFace marks it trust_remote_code, so loading it with trust_remote_code enabled runs that code on your machine. Read the code first.
How do I check iitolstykh/YOLO-Face-Person-Detector before loading it?
Run the xyz MCP tool model_load_safety on iitolstykh/YOLO-Face-Person-Detector to get a verdict on its weight files before you load them, or search it in CyberXYZ Check at https://cyberxyz.io/check?q=iitolstykh%2FYOLO-Face-Person-Detector.
Risk computed 2026-11-14 at 13:48 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.