240 published AI models are associated with this package: 6 name it in a requirements or pyproject file, 4 load it or import it directly, and 231 are inferred from the runtime stack their declared library pulls in. Only 5 state a version requirement, so this is not a count of affected models.
cvss
9.8
critical
CVSS v3.1 base score out of 10
epss
3.4%
medium
chance of exploitation in 30 days, 89th percentile of all CVEs
xyz score
5.7
medium
CyberXYZ composite out of 10
fig. 01 — GHSA-jjw5-xxj6-pcv5, the advisory selected below
scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner.
// cvss v3.1 vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Checked 2026-11-06 at 21:45 UTC. The most recent advisory here was published 2024-06-06. Updated continuously from NVD, GHSA, OSV and CNA feeds.