Skops-dev - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2025-08-08.

Products

CVE-2025-54886 - CVSS 8.4 (high), 2025-08-08: skops is a Python library which helps users share and ship their scikit-learn based models. In versions 0.12.0 and below, the Card.get_model does not contain…
CVE-2025-54413 - CVSS 8.7 (high), 2025-07-26: skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode,…
CVE-2025-54412 - CVSS 8.7 (high), 2025-07-26: skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the…
CVE-2024-37065 - CVSS 7.8 (high), 2024-06-04: Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code…