Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rf65-fc2p-2gjv

Опубликовано: 17 мая 2024
Источник: github
Github: Не прошло ревью

Описание

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().

EPSS

Процентиль: 52%
0.00664
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVSS3: 8.1
redhat
больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVSS3: 7.5
nvd
больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVSS3: 7.5
debian
больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerabilit ...

CVSS3: 7.5
altlinux
3 месяца назад

ALT-PU-2026-12304: package `python3-module-joblib` update to version 1.5.3-alt1

EPSS

Процентиль: 52%
0.00664
Низкий