sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-23586 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-23586 Source advisory: OSV:PYSEC-2026-3096...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-21728 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-21728 Source advisory: OSV:PYSEC-2026-3121...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-21730 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-21730 Source advisory: OSV:PYSEC-2026-3247...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-21726 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-21726 Source advisory: OSV:PYSEC-2026-3082...

Deserialization Of Untrusted Data

mlflow is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to improper handling of untrusted data in the loadmodelfromlocalfile function within the sklearn/init.py. The vulnerability allows an attacker to inject a malicious pickle object into a model file on upload, which...

Deserialization Of Untrusted Data

MLflow is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to unsafe handling user-supplied data in the sklearn/init.py within the loadmodelfromlocalfile function, which allows an attacker to inject a malicious pickle object into a model file on upload which will then be...

CVE-2024-5206 Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stopwords...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2023-25660 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2023-25660 Source advisory: OSV:GHSA-QJQC-VQCF-5QVJ...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2023-25665 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2023-25665 Source advisory: OSV:GHSA-558H-MQ8X-7Q9G...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2023-25666 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2023-25666 Source advisory: OSV:GHSA-F637-VH3R-VFH2...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2023-25669 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2023-25669 Source advisory: OSV:GHSA-RCF8-G8JV-VG6P...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2023-25670 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2023-25670 Source advisory: OSV:GHSA-49RQ-HWC3-X77W...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2023-25672 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2023-25672 Source advisory: OSV:GHSA-94MM-G2MV-8P7R...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2023-25673 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2023-25673 Source advisory: OSV:GHSA-647V-R7QQ-24FH...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-41910 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-41910 Source advisory: OSV:GHSA-FRQP-WP83-QGGV...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-41907 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-41907 Source advisory: OSV:GHSA-368V-7V32-52FX...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-41902 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-41902 Source advisory: OSV:GHSA-CG88-RPVP-CJV5...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-41900 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-41900 Source advisory: OSV:GHSA-XVWP-H6JV-7472...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-41895 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-41895 Source advisory: OSV:GHSA-GQ2J-CR96-GVQX...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-41890 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-41890 Source advisory: OSV:GHSA-H246-CGH4-7475...