Search for packages
| purl | pkg:pypi/scikit-learn@0.18.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-jjw5-xxj6-pcv5
Aliases: CVE-2020-13092 |
scikit-learn Deserialization of Untrusted Data scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that … | There are no reported fixed by versions. |
|
PYSEC-2024-110
Aliases: CVE-2024-5206 GHSA-jw8x-6495-233v |
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was … |
Not vulnerable |
|
PYSEC-2020-108
Aliases: CVE-2020-28975 GHSA-jxfp-4rvq-9h9m |
** DISPUTED ** svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to … | There are no reported fixed by versions. |
|
PYSEC-2024-110
Aliases: CVE-2024-5206 GHSA-jw8x-6495-233v |
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was … |
Not vulnerable |
|
PYSEC-2020-107
Aliases: CVE-2020-13092 GHSA-jjw5-xxj6-pcv5 |
** DISPUTED ** scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed … |
Vulnerable |