206 matches found
sqli-xss-detection
How to run it Open a terminal in the project root: sqlixssdete...
CLSA-2026-1787201491 TuxCare security update for scikit-learn (1 CVE)
TuxCare rebuilt scikit-learn to address 1 CVE. Fixed in 1.0.2.post2+tuxcare...
PT-2026-95521
TuxCare rebuilt scikit-learn to address 1 CVE. Fixed in 1.0.2.post2+tuxcare...
python313-scikit-learn-1.9.0-1.1 on GA media (moderate)
python313-scikit-learn-1.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11498-1 Rating: moderate Cross-References: CVE-2024-5206 CVSS scores: CVE-2024-5206 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...
OPENSUSE-SU-2026:11498-1 python313-scikit-learn-1.9.0-1.1 on GA media
These are all security issues fixed in the python313-scikit-learn-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-76424
These are all security issues fixed in the python313-scikit-learn-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
Malicious code in sys-scikit-learn (PyPI)
Source: ossf-package-analysis a43a0e5d5c9f583954d954b1a27badf0220728b50a05983479b1e2e212e8c16e The OpenSSF Package Analysis project identified 'sys-scikit-learn' @ 17.8.18 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
Malicious code in scikit-learn-matplotlib (PyPI)
Source: ossf-package-analysis 14d5e86444b47f8ee729dcf7930f4ba68d938ea99b786e110e5d7bd53f081fa9 The OpenSSF Package Analysis project identified 'scikit-learn-matplotlib' @ 6.12.17 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with...
Malicious code in beautifulsoup-scikit-learn (PyPI)
Source: ossf-package-analysis 6e35a9499d5b3efd34a3813328043f5f0132eef5cacc23f14dbaa2ba4e06ce43 The OpenSSF Package Analysis project identified 'beautifulsoup-scikit-learn' @ 2.4.9 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with...
PYSEC-2026-1636 MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...
MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...
PYSEC-2026-1643 MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...
MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...
EUVD-2024-1907
Malicious code in bioql PyPI...
EUVD-2024-1956
Malicious code in bioql PyPI...
EUVD-2025-22763
Malicious code in bioql PyPI...
EUVD-2024-0161
Malicious code in bioql PyPI...
EUVD-2024-1966
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-5206
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fix...
Linux Distros Unpatched Vulnerability : CVE-2020-13092
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scikit-learn aka sklearn through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load function, if reduce makes ...