CVE-2024-34997

The joblib library (specifically version 1.4.2) contains a deserialization vulnerability in the joblib.numpy_pickle::NumpyArrayWrapper().read_array() component. This is caused by the unsafe use of the pickle.load() function, which can allow a local authenticated attacker to execute arbitrary code...