Skip to content
OpenAdvisories

Package · PyPI

snorkel

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.8
    CVE-2026-31223

    Snorkel BaseLabeler.load uses an unsafe pickle.load

    The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load() function on user-supplie…

    snorkel PyPI
  • High 8.8
    CVE-2026-31224

    Snorkel MultitaskClassifier.load uses an unsafe torch.load

    The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of the MultitaskClassifier class. The method loads model weight files using torch.load() without enabling the security-restr…

    snorkel PyPI
  • High 8.8
    CVE-2026-31222

    Snorkel Trainer.load uses an unsafe torch.load

    The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class. The method loads model checkpoint files using torch.load() without enabling the security-restrictive weights_only=…

    snorkel PyPI