CVE

CVE-2020-13092

CVE-2020-13092

scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call.

Source: CVE-2020-13092

Exit mobile version