From 1087d4a6ec08ee49e6dfe9f3813a9e76f0ce1127 Mon Sep 17 00:00:00 2001
From: Patrick Chilton <chpatrick@gmail.com>
Date: Wed, 26 Aug 2026 03:35:55 +0200
Subject: [PATCH] fix: load torch weights with weights_only=True to prevent
 code execution (#728)

---
 python/rapidocr/inference_engine/pytorch/networks/main.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/python/rapidocr/inference_engine/pytorch/networks/main.py b/python/rapidocr/inference_engine/pytorch/networks/main.py
index 8d0b050..4ba80da 100644
--- a/python/rapidocr/inference_engine/pytorch/networks/main.py
+++ b/python/rapidocr/inference_engine/pytorch/networks/main.py
@@ -62,6 +62,6 @@ class ModelLoader:
 
     def _build_and_load_model(self, arch_config, model_path: Path):
         model = BaseModel(arch_config)
-        state_dict = torch.load(model_path, map_location="cpu", weights_only=False)
+        state_dict = torch.load(model_path, map_location="cpu", weights_only=True)
         model.load_state_dict(state_dict)
         return model