CVSS: 4.7EPSS: 0%CPEs: 3EXPL: 0CVE-2024-5206 – Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn
https://notcve.org/view.php?id=CVE-2024-5206
06 Jun 2024 — A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the `stop_words_` attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the `stop_words_` attribute coul... • https://github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8 • CWE-921: Storage of Sensitive Data in a Mechanism without Access Control •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 3CVE-2020-28975 – SciKit-Learn 0.23.2 Denial Of Service
https://notcve.org/view.php?id=CVE-2020-28975
21 Nov 2020 — svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) with a large value in the _n_support array. NOTE: the scikit-learn vendor's position is that the behavior can only occur if the library's API is violated by an application that changes a private attribute. **EN DISPUTA** La función svm_predict_values en ... • http://packetstormsecurity.com/files/160281/SciKit-Learn-0.23.2-Denial-Of-Service.html •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 1CVE-2020-13092
https://notcve.org/view.php?id=CVE-2020-13092
15 May 2020 — scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner ** EN DISPUTA ** scikit-learn (también se conoce como sklearn) versiones hasta 0.23.0, puede deserializar y ejecutar comandos desde un archivo no confia... • https://github.com/0FuzzingQ/vuln/blob/master/sklearn%20unserialize.md • CWE-502: Deserialization of Untrusted Data •