Skip to content
OpenAdvisories

Package · Debian

scikit-learn

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-13092

    scikit-learn Deserialization of Untrusted Data

    scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() functio…

    scikit-learn scikit-learn Debian PyPI