ai model report
Is morsetechlab/yolov11-license-plate-detection safe to load?
HIGH risk. 2 of 58 tracked dependencies carry advisories, 1 malicious. Driven by pulls ultralytics, which has known-malicious releases, without pinning a version.
8.5xyz score out of 10HIGH
HIGHUses package(s) with known-malicious releases, but pins no version — the installed version decides whether this is a compromise: ultralytics (malicious at 8.3.41, 8.3.42, 8.3.43, 8.3.44, 8.3.45)
1 more finding on this model.
- Author
- morsetechlab
- Task
- object-detection
- Loader
- ultralytics
- License
- agpl-3.0
- Downloads
- 81,560
- Remote code
- not required
4 direct, 3 with findings, 54 reachable, 1 malicious
| Package | Evidence | Advisories | Worst |
|---|---|---|---|
| ultralyticsmalicious | direct, runtime | 0 | CRITICAL |
| opencv-python | direct, inferred | 31 | none pinned |
Create a free accountto see all 58 dependencies, which versions are pinned, and what to change.
Risk computed 2026-10-01 at 23:49 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.