Skip to content

Product

debian/scikit-learn vulnerabilities

2 published CVES affecting debian/scikit-learn, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest debian/scikit-learn CVEs

Newest publication first

  1. CVE-2024-5206 scikit-learn sensitive data leakage vulnerability

    MediumCVSS 5.3

    A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data wit...

  2. CVE-2020-13092 scikit-learn Deserialization of Untrusted Data

    CriticalCVSS 9.8

    scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as un...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.