Scikit-learn Scikit-learn
3 CVEs affecting Scikit-learn Scikit-learn. Latest disclosed: 2024-06-06. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-13092 | Critical | 9.8 | 2020-05-15 | scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce… |
CVE-2020-28975 | High | 7.5 | 2020-11-21 | svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fa… |
CVE-2024-5206 | Medium | 4.7 | 2024-06-06 | A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fi… |