Debian/scikit-learn: critical 9.8
scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third p
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: DEBIAN-CVE-2020-13092#Debian:13/scikit-learn
- https://security-tracker.debian.org/tracker/CVE-2020-13092
published · modified · JSON