Security Advisory

CVE-2024-37065

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-06-04 12:03:19
Last updated 2024-08-02 03:43:50
Assigner HiddenLayer
State PUBLISHED

Description

Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end users system when loaded.