Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-1925
  • PyPI/skops
 SKOPS Card.get_model happily allows arbitrary code execution 07 Jul
  • Fix available
  • Severity - 8.4 (High)
PYSEC-2026-1926
  • PyPI/skops
 Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time 07 Jul
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2026-1927
  • PyPI/skops
 Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution 07 Jul
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2026-1928
  • PyPI/skops
 Skops unsafe deserialization 07 Jul
  • No fix available
  • Severity - 7.8 (High)
GHSA-378x-6p4f-8jgm
  • PyPI/skops
 SKOPS Card.get_model happily allows arbitrary code execution 07 Aug 2025
  • Fix available
  • Severity - 8.4 (High)
GHSA-4v6w-xpmh-gfgp
  • PyPI/skops
 Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time 25 Jul 2025
  • Fix available
  • Severity - 8.7 (High)
GHSA-m7f4-hrc6-fwg3
  • PyPI/skops
 Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution 25 Jul 2025
  • Fix available
  • Severity - 8.7 (High)
GHSA-q49c-6v6g-wgq3
  • PyPI/skops
 Skops unsafe deserialization 04 Jun 2024
  • No fix available
  • Severity - 7.8 (High)