PyPI/snorkel CVE-2026-31223: high 8.8, EPSS 0.39%
Snorkel BaseLabeler.load uses an unsafe pickle.load
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.10.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fq92-qc8f-482v
- https://nvd.nist.gov/vuln/detail/CVE-2026-31223
- https://github.com/snorkel-team/snorkel
- https://www.notion.so/CVE-2026-31223-35d1e1393188811ab1d0e4a8a2e67992
CVE-2026-31223 · published · modified · JSON