Joblib Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Joblib Project records in CISA KEV

No Joblib Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Joblib 2 records HIGH

Records

2 records

TI-2022-06169 CVE-2022-21797 · GHSA-6hrg-qmvc-2xh8

Arbitrary code execution in joblib

HIGH 82

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02627 Published 2022-09-26 Fixed in 1.2.0 CWE-94

TI-2024-23174 CVE-2024-34997 · GHSA-rf65-fc2p-2gjv

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component…

HIGH 68

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00664 Published 2024-05-17 No fix listed CWE-502

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0