Beveiligingsadvies

CVE-2024-37065

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-04 12:03:19
Laatst bijgewerkt 2024-08-02 03:43:50
Toegewezen door HiddenLayer
CVSS-score 7.8
Status PUBLISHED

Beschrijving

Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end user's system when loaded.