CVE-2024-37053

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...

CVE-2024-37053

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...

CVE-2024-37052

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...

CVE-2024-37052

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in scikit-learn

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of scikit-learn. Vulnerability Details CVEID:CVE-2020-28975 DESCRIPTION: scikit-learn is vulnerable to a denial of service, caused by an error in svmpredictvalues in svm.cpp in Libsvm. By using a specially-craft...

Malicious code in scikit-learn-matplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14d5e86444b47f8ee729dcf7930f4ba68d938ea99b786e110e5d7bd53f081fa9 The OpenSSF Package Analysis project identified 'scikit-learn-matplotlib' @ 6.12.17 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1405 Malicious code in scikit-learn-matplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14d5e86444b47f8ee729dcf7930f4ba68d938ea99b786e110e5d7bd53f081fa9 The OpenSSF Package Analysis project identified 'scikit-learn-matplotlib' @ 6.12.17 pypi as malicious. It is considered malicious because: - The...

Malicious code in beautifulsoup-scikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e35a9499d5b3efd34a3813328043f5f0132eef5cacc23f14dbaa2ba4e06ce43 The OpenSSF Package Analysis project identified 'beautifulsoup-scikit-learn' @ 2.4.9 pypi as malicious. It is considered malicious because: - Th...

Malicious code in sys-scikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a43a0e5d5c9f583954d954b1a27badf0220728b50a05983479b1e2e212e8c16e The OpenSSF Package Analysis project identified 'sys-scikit-learn' @ 17.8.18 pypi as malicious. It is considered malicious because: - The packag...

SUSE CVE-2020-13092

scikit-learn aka sklearn through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load function, if reduce makes an os.system call. NOTE: third parties dispute this issue because the joblib.load function is documented as unsafe and it is the user's...

SUSE CVE-2020-28975

svmpredictvalues in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service segmentation fault via a crafted model SVM introduced via pickle, json, or any other model permanence standard with a large value in the nsupport array. NOT...

MAL-2023-2218 Malicious code in scikit-lern (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7f251a0fde1f6bcc1fa1290b60c6c09ee739c1ed8de2be91fd77f3280f3a0556 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in scikitt-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c8573809cd0b77e4e2c4f4dea60c0323389487920e896d00dbdd84ea88be71d5 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in scikkit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b492538de98d6ee998d8fd91f4f7308eb144fa6ffb4f0abe103ee389d6d7e42a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2211 Malicious code in scikit-lean (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1c90858b7d34c77b6f3a49a7c871896ca20ac72c3e300e124da8f03ccc271fe4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in scikit-leearn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4f68a63917e4453d5b038a63a61729ad75baf5597ca7db40c19b5ff45130718a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2216 Malicious code in scikit-leearn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4f68a63917e4453d5b038a63a61729ad75baf5597ca7db40c19b5ff45130718a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in scikit-elarn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b11f8176cd5cf59b7379a0345c32020a4c3ecbccc8dcd7a1b2ed65b1600136be Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2207 Malicious code in scikit-elarn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b11f8176cd5cf59b7379a0345c32020a4c3ecbccc8dcd7a1b2ed65b1600136be Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in scikit-earn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e7b4ab4be436c508367678fba7927f3ae02ae5238c2663209d17904f655a526d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...