VulnerableCode Package Details - pkg:pypi/scikit-learn@0.23.2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/scikit-learn@0.23.2

Essentials

purl	pkg:pypi/scikit-learn@0.23.2

Next non-vulnerable version	1.5.0
Latest non-vulnerable version	1.5.0
Risk score	3.4

Vulnerabilities affecting this package (4)

Advisory	Summary	Fixed in package version
GHSA-jxfp-4rvq-9h9m Aliases: CVE-2020-28975	scikit-learn Denial of Service svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers …	1.0.1 Vulnerable
PYSEC-2024-110 Aliases: CVE-2024-5206 GHSA-jw8x-6495-233v	A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was …	1.5.0 Not vulnerable
PYSEC-2020-108 Aliases: CVE-2020-28975 GHSA-jxfp-4rvq-9h9m	DISPUTED svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to …	There are no reported fixed by versions.
PYSEC-2024-110 Aliases: CVE-2024-5206 GHSA-jw8x-6495-233v	A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was …	1.5.0 Not vulnerable

This package is not known to fix any advisories.