exploitDog

GHSA-rf65-fc2p-2gjv

Опубликовано: 17 мая 2024

Источник: github

Github: Не прошло ревью

Описание

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().

Ссылки

EPSS

Процентиль: 65%

0.00484

Низкий

CVE ID

Связанные уязвимости

CVE-2024-34997

CVSS3: 7.5

ubuntu

больше 1 года назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVE-2024-34997

CVSS3: 8.1

redhat

больше 1 года назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVE-2024-34997

CVSS3: 7.5

nvd

больше 1 года назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVE-2024-34997

CVSS3: 7.5

debian

больше 1 года назад

joblib v1.4.2 was discovered to contain a deserialization vulnerabilit ...

EPSS

Процентиль: 65%

0.00484

Низкий

CVE ID