scikit-learn Deserialization of Untrusted Data

2022-05-2417:17:59

Google

osv.dev

9.6 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.7%

JSON

scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call.
NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user’s responsibility to use the function in a secure manner.

CPENameOperatorVersion
scikit-learneq0.22.1
scikit-learneq0.13.1
scikit-learneq0.20.0
scikit-learneq0.14.1
scikit-learneq0.21.0
scikit-learneq0.21.3
scikit-learneq0.21.2
scikit-learneq0.22.2.post1
scikit-learneq0.21.1
scikit-learneq0.23.0

Name	Operator	Version
scikit-learn	eq	0.22.1
scikit-learn	eq	0.13.1
scikit-learn	eq	0.20.0
scikit-learn	eq	0.14.1
scikit-learn	eq	0.21.0
scikit-learn	eq	0.21.3
scikit-learn	eq	0.21.2
scikit-learn	eq	0.22.2.post1
scikit-learn	eq	0.21.1
scikit-learn	eq	0.23.0