Snorkel 安全漏洞

Snorkel is an open-source system developed by Snorkel that uses weak supervision to quickly generate training data. Versions of Snorkel prior to v0.10.0 contain security vulnerabilities. These vulnerabilities stem from the BaseLabeler class’s BaseLabeler.load method, which uses the unsafe...

CVE-2026-31224

The CVE-2026-31224 entry concerns the snorkel library up to v0.10.0, where the MultitaskClassifier.load() method deserializes model weights with torch.load() without enabling weights_only=True. This allows untrusted Pickle-based object deserialization, enabling arbitrary code execution when loadi...

Snorkel 安全漏洞

Snorkel is an open-source system developed by Snorkel that enables rapid generation of training data using weak supervision. Versions of Snorkel prior to v0.10.0 contain security vulnerabilities. These vulnerabilities stem from the MultitaskClassifier class’s MultitaskClassifier.load method, whic...