All products

skops

PyPI · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Skops unsafe deserializationCVE-2024-37065 · GHSA-Q49C-6V6G-WGQ3Version ranges need review. skops PyPI High No fix reported
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods ExecutionCVE-2025-54412 · GHSA-M7F4-HRC6-FWG3Version ranges need review. skops PyPI High Fix reported
SKOPS Card.get_model happily allows arbitrary code executionCVE-2025-54886 · GHSA-378X-6P4F-8JGMVersion ranges need review. skops PyPI High Fix reported
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load timeCVE-2025-54413 · GHSA-4V6W-XPMH-GFGPVersion ranges need review. skops PyPI High Fix reported