CVE-2020-13092

scikit-learn aka sklearn through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load function, if reduce makes an os.system call. NOTE: third parties dispute this issue because the joblib.load function is documented as unsafe and it is the user's...

CVE-2020-13092: Deserialization of Untrusted Data

scikit-learn aka sklearn through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load function, if reduce makes an os.system call. NOTE: third parties dispute this issue because the joblib.load function is documented as unsafe and it is the user's...

PT-2020-13329

Name of the Vulnerable Software and Affected Versions scikit-learn aka sklearn versions through 0.23.0 Description The issue allows unserialization and execution of commands from an untrusted file passed to the joblib.load function, if reduce makes an os.system call. It is noted that third partie...