Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/scikit-learn@1.0.1
purl pkg:pypi/scikit-learn@1.0.1
Next non-vulnerable version 1.5.0
Latest non-vulnerable version 1.5.0
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
PYSEC-2024-110
Aliases:
CVE-2024-5206
GHSA-jw8x-6495-233v
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was …
1.5.0
Not vulnerable
PYSEC-2024-110
Aliases:
CVE-2024-5206
GHSA-jw8x-6495-233v
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was …
1.5.0
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-jxfp-4rvq-9h9m
scikit-learn Denial of Service svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers … CVE-2020-28975