CVE-2024-34997

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper.readarray. NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content...

CVE-2024-34997

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper.readarray. NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content...

CVE-2024-34997: Deserialization of Untrusted Data

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper.readarray. NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content...

CVE-2024-34997

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper.readarray. NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content...

PT-2024-26286

Name of the Vulnerable Software and Affected Versions joblib version 1.4.2 Description A deserialization issue was found in the joblib.numpy pickle::NumpyArrayWrapper.read array component. This issue is disputed by the supplier, who claims that NumpyArrayWrapper is only used during caching of...

joblib 安全漏洞

joblib is a set of tools open-sourced by joblib to provide lightweight pipelining in Python. A security vulnerability exists in joblib v1.4.2, which stems from the presence of a deserialization vulnerability...

CVE-2024-34997

The joblib library (specifically version 1.4.2) contains a deserialization vulnerability in the joblib.numpy_pickle::NumpyArrayWrapper().read_array() component. This is caused by the unsafe use of the pickle.load() function, which can allow a local authenticated attacker to execute arbitrary code...

CVE-2024-34997

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper.readarray. NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content...

CVE-2024-34997

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper.readarray. NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content...

GLSA-202401-01 : Joblib: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202401-01 Joblib: Arbitrary Code Execution - The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement. CVE-2022-21797 Note that Ness...

FreeBSD : py39-joblib -- arbitrary code execution (845f8430-d0ee-4134-ae35-480a3e139b8a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 845f8430-d0ee-4134-ae35-480a3e139b8a advisory. - The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the...

Debian: Security Advisory (DLA-3193-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3193-2] joblib security update

Debian LTS Advisory DLA-3193-2 [email protected] https://www.debian.org/lts/security/ Helmut Grohne March 30, 2023 https://wiki.debian.org/LTS Package : joblib Version : 0.13.0-2+deb10u2 CVE ID : CVE-2022-21797 Debian Bug : 1020820 It was discovered that joblib did not completely saniti...

DLA-3193-2 joblib - security update

Bulletin has no description...

SUSE CVE-2020-13092

scikit-learn aka sklearn through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load function, if reduce makes an os.system call. NOTE: third parties dispute this issue because the joblib.load function is documented as unsafe and it is the user's...

SUSE CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

Fedora 36 : python-joblib (2022-c0bfe37ae5)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c0bfe37ae5 advisory. Security fix for CVE-2022-21797 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

openSUSE 15 Security Update : python-joblib (openSUSE-SU-2022:10214-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10214-1 advisory. - The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval...

OPENSUSE-SU-2022:10214-1 Security update for python-joblib

This update for python-joblib fixes the following issues: - CVE-2022-21797: Fixed arbitrary code execution in joblib boo1204232...

Security update for python-joblib (important)

openSUSE Security Update: Security update for python-joblib Announcement ID: openSUSE-SU-2022:10214-1 Rating: important References: 1204232 Cross-References: CVE-2022-21797 CVSS scores: CVE-2022-21797 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...