{"action":"Upgrade scikit-learn to 1.5.0 or later.","affected":[{"fixed":"1.5.0","introduced":"0"}],"component":"scikit-learn","cve_ids":["CVE-2024-5206"],"ecosystem":"PyPI","epss":0.00189,"exploited":false,"fixed_versions":["1.5.0"],"ghsa_id":"GHSA-jw8x-6495-233v","id":"tcs_01M5KFPP74E7B8BJSKFN8Z2CGD","modified_at":"2026-09-10T03:50:15.628224747Z","published_at":"2024-06-06T21:30:37Z","references":["https://osv.dev/vulnerability/GHSA-jw8x-6495-233v","https://nvd.nist.gov/vuln/detail/CVE-2024-5206","https://github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8","https://github.com/pypa/advisory-database/tree/main/vulns/scikit-learn/PYSEC-2024-110.yaml","https://github.com/scikit-learn/scikit-learn","https://huntr.com/bounties/14bc0917-a85b-4106-a170-d09d5191517c"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jw8x-6495-233v","url":"https://osv.dev/vulnerability/GHSA-jw8x-6495-233v"}],"summary":"scikit-learn sensitive data leakage vulnerability"}