Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-34997

Опубликовано: 17 мая 2024
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:joblib_project:joblib:1.4.2:*:*:*:*:python:*:*

EPSS

Процентиль: 65%
0.00484
Низкий

7.5 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

ubuntu логотип

CVE-2024-34997

CVSS3: 7.5
ubuntu
больше 1 года назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

redhat логотип

CVE-2024-34997

CVSS3: 8.1
redhat
больше 1 года назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

debian логотип

CVE-2024-34997

CVSS3: 7.5
debian
больше 1 года назад

joblib v1.4.2 was discovered to contain a deserialization vulnerabilit ...

github логотип

GHSA-rf65-fc2p-2gjv

github
больше 1 года назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().

EPSS

Процентиль: 65%
0.00484
Низкий

7.5 High

CVSS3

Дефекты

CWE-502