TI-2025-34219 CVE-2025-54413 · GHSA-4v6w-xpmh-gfgp
skops' MethodNode can access unexpected object fields through dot notation, leading to…
Priority HIGH 73
skops is a Python library which helps users share and ship their scikit-learn based models.
skops-dev
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
skops-dev records in CISA KEVNo skops-dev vulnerabilities are listed in CISA KEV.
Records
4 records
TI-2025-34218 CVE-2025-54412 · GHSA-m7f4-hrc6-fwg3
skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution
Priority HIGH 73
skops is a Python library which helps users share and ship their scikit-learn based models.
TI-2025-34620 CVE-2025-54886 · GHSA-378x-6p4f-8jgm
skops: Card.get_model does not block arbitrary code execution
Priority HIGH 72
skops is a Python library which helps users share and ship their scikit-learn based models.
TI-2024-24603 CVE-2024-37065 · GHSA-q49c-6v6g-wgq3
Deserialization of untrusted data in skops-dev Skops
Priority LOW 36
Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end user's system when loaded.