CVE-2024-37065

Publication date

2024-06-04 12:03:19

Family

HiddenLayer

State

PUBLISHED

Description

Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end users system when loaded.