Read the docs

NIST

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

NIST records in CISA KEV

No NIST vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-84129 CVE-2026-120833 · GHSA-4ppf-9g5f-q8hv

Deserialization of untrusted data in labbench read() enables code execution

Priority LOW 36

labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00144 Published 2026-11-03 Fixed in 0.46.1 CWE-502
Open these records in search →