audiolm-pytorch (>=1.1.5, <=1.2.12), autoforecast (>=0.0.6, <=0.0.9) +31 more potentially affected by CVE-2024-5206 via scikit-learn (0.24.0)

scikit-learn PYPI version 0.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - audiolm-pytorch =1.1.5, =0.0.6, =1.0.1, =0.2.1, =0.0.2, =0.0.6, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.38.0 and more Source cves:...

deepbgc (>=0.1.0, <=0.1.2), dlatk (>=1.1.7, <=1.1.8) +6 more potentially affected by CVE-2024-5206 via scikit-learn (0.18.2)

scikit-learn PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - deepbgc =0.1.0, =1.1.7, =1.0.0, =0.3.0, =0.4.0b0, =2.0.0, =2.1.0 Source cves: CVE-2024-5206 Source advisory: OSV:PYSEC-2024-110...

alibaba-suanfa (1.0.0), berryworld (>=1.0.0.40992, <=1.0.0.120361) +16 more potentially affected by CVE-2024-5206 via scikit-learn (0.20.2)

scikit-learn PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - alibaba-suanfa 1.0.0 - berryworld =1.0.0.40992, =0.5.7, =0.0.1.0, =0.2.3.1, =0.5.1, =0.5.3, =0.5.4 - novosparc 0.3.0 - profanity-check...

adpred (>=1.1.2, <=1.2.7), adversarial-labeller (>=0.1.2, <=0.1.7) +118 more potentially affected by CVE-2024-5206 via scikit-learn (0.21.3)

scikit-learn PYPI version 0.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - adpred =1.1.2, =0.1.2, =0.42.0, =0.3.0, =0.1.1, =1.0.81, =1.0.81, =1.0.0rc83, =0.3.0, =0.3.7 - bicleaner 0.12.0 and more Source cves:...

iepy (0.9.5), revscoring (>=0.6.4, <=0.7.11) +1 more potentially affected by CVE-2024-5206 via scikit-learn (0.15.2)

scikit-learn PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - iepy 0.9.5 - revscoring =0.6.4, =0.7.11 - skll 1.0.0 Source cves: CVE-2024-5206 Source advisory: OSV:PYSEC-2024-110...

chicksexer (0.2.2), example-jpromero-2017 (>=0.0.1, <=0.1.3) +11 more potentially affected by CVE-2024-5206 via scikit-learn (0.18.1)

scikit-learn PYPI version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - chicksexer 0.2.2 - example-jpromero-2017 =0.0.1, =0.1.3, =0.0.3, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-5206 Sour...

a62-emotion (>=0.9.2, <=0.11.4), abexp (>=0.0.2, <=0.0.3) +532 more potentially affected by CVE-2024-5206 via scikit-learn (0.24.2)

scikit-learn PYPI version 0.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - a62-emotion =0.9.2, =0.0.2, =0.0.0, =1.2.1, =1.6.2, =0.0.1, =1.3.4, =0.0.1, =0.0.96, =0.0.6, =0.3.0, =0.5.6, =0.6.1 and more Source cve...

ailab-lite (>=0.1.1, <=0.1.14), argumentative-question-classifier (>=0.0.9, <=0.71.0) +81 more potentially affected by CVE-2024-5206 via scikit-learn (0.23.1)

scikit-learn PYPI version 0.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - ailab-lite =0.1.1, =0.0.9, =0.15.0, =1.0.0, =3.0.2, =0.0.1, =0.1.0.dev1, =0.0.1a39, =0.0.1a1, =1.2.0, =0.0.2.post3, =0.1.0, =0.2.3 -...

auto-dl (0.1.1), auto-ml (>=2.8.0, <=2.8.1) +42 more potentially affected by CVE-2024-5206 via scikit-learn (0.19.1)

scikit-learn PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - auto-dl 0.1.1 - auto-ml =2.8.0, =1.0.72, =0.1.57, =0.1.19008.12a1, =0.2.0, =0.10.0, =1.1.5, =0.0.12, =0.0.6b0, =0.0.5, =0.2.0, =0.4.0 -...

articlequality (0.4.1), bdacore (3.0.1) +37 more potentially affected by CVE-2024-5206 via scikit-learn (0.19.2)

scikit-learn PYPI version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - articlequality 0.4.1 - bdacore 3.0.1 - codedomainemissary 0.0.1.dev0 - ctparse =0.0.16, =0.1.0, =2.0.0.dev1, =0.6.5, =0.0.1, =0.3.0,...

adversarial-robustness-toolbox (>=1.4.0, <=1.4.3), alectio-sdk (>=0.6.2, <=0.6.8) +32 more potentially affected by CVE-2024-5206 via scikit-learn (0.22.2)

scikit-learn PYPI version 0.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - adversarial-robustness-toolbox =1.4.0, =0.6.2, =0.1.0.dev15, =0.0.26, =0.0.118, =0.0.1, =0.2.0, =0.7.0, =0.0.1, =0.2.4, =1.3.9, =0.1.7a...

addr-detector (0.1.0), deeppavlov (>=0.0.5.1, <=0.0.5.3) +6 more potentially affected by CVE-2024-5206 via scikit-learn (0.19.0)

scikit-learn PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - addr-detector 0.1.0 - deeppavlov =0.0.5.1, =0.1.2, =1.0.1, =1.0.2 Source cves: CVE-2024-5206 Source advisory: OSV:PYSEC-2024-110...

back (>=0.1.1, <=0.1.4), mogp (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2024-5206 via scikit-learn (0.21.1)

scikit-learn PYPI version 0.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - back =0.1.1, =0.1.1, =0.1.2 - trackpal 1.2.0 Source cves: CVE-2024-5206 Source advisory: OSV:PYSEC-2024-110...

autogluon (0.0.5), bliz (>=0.1.0, <=0.1.3) +25 more potentially affected by CVE-2024-5206 via scikit-learn (0.21.2)

scikit-learn PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - autogluon 0.0.5 - bliz =0.1.0, =0.0.70, =0.1.18, =1.0.0, =0.8.0, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.3, =0.0.14 and mo...

adversarial-robustness-toolbox (1.6.1), aiqc (>=2.1.0, <=7.1.5) +120 more potentially affected by CVE-2024-5206 via scikit-learn (0.24.1)

scikit-learn PYPI version 0.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - adversarial-robustness-toolbox 1.6.1 - aiqc =2.1.0, =0.7.0, =2.0.0, =0.0.37, =0.0.1, =0.1.0, =2021.3.29.16, =0.2.4, =0.1.0, =0.0.396,...

fukuml (>=0.1.5, <=0.4.1), moodleinspire (0.0.10) +6 more potentially affected by CVE-2024-5206 via scikit-learn (0.17.1)

scikit-learn PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - fukuml =0.1.5, =0.0.2, =0.0.1, =1.0.1, =0.0.4.dev41, =1.2.0, =0.3.0, =0.3.2 Source cves: CVE-2024-5206 Source advisory: OSV:PYSEC-2024-...

b2btools (>=3.0.0b34, <=3.0.0), bxtorch (>=0.2.17, <=0.6.0) +42 more potentially affected by CVE-2024-5206 via scikit-learn (0.20.4)

scikit-learn PYPI version 0.20.4 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - b2btools =3.0.0b34, =0.2.17, =0.0.4, =1.4.8, =0.1.1, =0.0.36, =0.6.0, =0.5.1, =0.7.0, =0.0.4, =0.6.1, =0.4.11, =0.0.1, =0.1.0 -...

PYSEC-2024-110

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stopwords...

UBUNTU-CVE-2024-5206

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stopwords...

CVE-2024-5206 Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stopwords...