Skip to content
OpenAdvisories

Package · Debian

scikit-learn

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.7
    CVE-2024-5206

    Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn

    A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in …

    scikit-learn scikit-learn/scikit-learn scikit-learn scikit-learn Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2020-13092

    scikit-learn Deserialization of Untrusted Data

    scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() functio…

    scikit-learn scikit-learn Debian PyPI