EUVD-2024-0161

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Sensitive data leakage in scikit-learn's TfidfVectorizer fixed in version 1.5.0.

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.15.0 IF001	31 Jul 202409:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - AI Broker component usesscikit_learn-1.3.2-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl which is vulnerable to this CVE-2024-5206	9 Sep 202408:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses scikit_learn-1.3.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl which is vulnerable to CVE-2024-5206.	29 Dec 202512:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 24.0.0-IF001	8 Aug 202417:11	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	8 Jul 202408:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Predict Component uses CVE-2024-5206 (Medium) detected in scikit_learn-1.1.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl which is vulnerable to CVE-2024-5206	28 Jan 202521:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in scikit-learn affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	14 May 202519:56	–	ibm
Chainguard	CVE-2024-5206 vulnerabilities	6 Jun 202419:16	–	cgr
Circl	CVE-2024-5206	19 Jan 202600:13	–	circl
CNNVD	scikit-learn Security Vulnerabilities	6 Jun 202400:00	–	cnnvd

[
  {
    "enisaIdVendor": [
      {
        "id": "6532b8f0-31c1-3419-be6c-972afee7b67c",
        "vendor": {
          "name": "scikit-learn"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "385ae49a-2824-3648-8d14-58d955c97f16",
        "product": {
          "name": "scikit-learn/scikit-learn"
        },
        "product_version": "unspecified <1.5.0"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/14bc0917-a85b-4106-a170-d09d5191517c
github	www.github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-5206
github	www.github.com/pypa/advisory-database/tree/main/vulns/scikit-learn/PYSEC-2024-110.yaml

03 Oct 2025 20:07Current

5.1Medium risk

Vulners AI Score5.1

CVSS 34.7

CVSS 3.14.7

EPSS0.00037

SSVC