Skip to content
OpenAdvisories

Package · PyPI

scikit-learn

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.7
    CVE-2024-5206

    Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn

    A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in …

    scikit-learn scikit-learn/scikit-learn scikit-learn scikit-learn Debian Ubuntu PyPI
  • High 7.5
    CVE-2020-28975

    scikit-learn Denial of Service

    svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) w…

    scikit-learn PyPI
  • Critical 9.8
    CVE-2020-13092

    scikit-learn Deserialization of Untrusted Data

    scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() functio…

    scikit-learn scikit-learn Debian PyPI