https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:02:58.409988+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-13092 CVE-2020-13092 2026-10-04T04:02:58.430382+00:00

scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner

 https://cve.radiocsirt.org/vuln/ghsa-jjw5-xxj6-pcv5 GHSA-jjw5-xxj6-pcv5 — scikit-learn Deserialization of Untrusted Data 2026-10-04T04:02:58.430441+00:00

Affected: PyPI: scikit-learn

scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the `joblib.load()` function, if `__reduce__` makes an `os.system call`. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner.