Lucene search
K

5 matches found

Mageia
Mageia
added 2024/06/20 2:32 a.m.47 views

Updated python-scikit-learn packages fix security vulnerability

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stopwords...

4.7CVSS6.6AI score0.00037EPSS
Exploits0References2
Veracode
Veracode
added 2024/06/12 6:7 a.m.19 views

Improper Access Control

scikit-learn is vulnerable to Improper Access Control. The vulnerability is due to the unexpected storage of all tokens in the stopwords attribute, which can leak sensitive information such as passwords or keys when using the TfidfVectorizer class...

4.7CVSS6.3AI score0.00037EPSS
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2024/06/06 9:30 p.m.82 views

scikit-learn sensitive data leakage vulnerability

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stopwords...

4.7CVSS6.5AI score0.00037EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/06/06 9:30 p.m.21 views

GHSA-JW8X-6495-233V scikit-learn sensitive data leakage vulnerability

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stopwords...

5.3CVSS4.8AI score0.00037EPSS
Exploits0References5
OSV
OSV
added 2024/06/06 7:16 p.m.9 views

PYSEC-2024-110

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stopwords...

4.7CVSS4.6AI score0.00037EPSS
Exploits0References2
Rows per page
Query Builder