Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/scikit-learn@0.23.1
purl pkg:pypi/scikit-learn@0.23.1
Next non-vulnerable version 1.5.0
Latest non-vulnerable version 1.5.0
Risk score 2.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
PYSEC-2024-110
Aliases:
CVE-2024-5206
GHSA-jw8x-6495-233v
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was …
1.5.0
Not vulnerable
PYSEC-2020-108
Aliases:
CVE-2020-28975
GHSA-jxfp-4rvq-9h9m
** DISPUTED ** svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to … There are no reported fixed by versions.
PYSEC-2024-110
Aliases:
CVE-2024-5206
GHSA-jw8x-6495-233v
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was …
1.5.0
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
PYSEC-2020-107
** DISPUTED ** scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed … CVE-2020-13092
GHSA-jjw5-xxj6-pcv5