Joblib Project

Joblib

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-34997

Exploit
  • EPSS 0.48%
  • Published 17.05.2024 19:15:07
  • Last modified 29.09.2025 18:03:11

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted c...

9.8

CVE-2022-21797

Exploit
  • EPSS 0.19%
  • Published 26.09.2022 05:15:10
  • Last modified 21.11.2024 06:45:27

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.