Vendor/product archive

joblib_project / joblib CVEs

Beta · best-effort

2 CVEs tagged to joblib_project / joblib — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to joblib_project vendor archive

CVE-2024-34997

Published May 17, 2024

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supp…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-21797

Published Sep 26, 2022

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.

CVSS 7.3 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1