Most recent entries from all

cnvd-2020-33501

2026-10-04T02:26:31.500074+00:00

cnvd-2020-33501

EUVD-2026-41516

2026-10-04T02:26:31.500112+00:00

EUVD-2026-41516

fkie_cve-2020-13092

2026-10-04T02:26:31.500127+00:00

scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner

GHSA-jjw5-xxj6-pcv5 — scikit-learn Deserialization of Untrusted Data

2026-10-04T02:26:31.500159+00:00

Affected: PyPI: scikit-learn

scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the `joblib.load()` function, if `__reduce__` makes an `os.system call`. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner.

gsd-2020-13092

2026-10-04T02:26:31.500185+00:00

gsd-2020-13092

PYSEC-2020-107

2026-10-04T02:26:31.500197+00:00

Affected: PyPI: scikit-learn

** DISPUTED ** scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner.