Skops-dev vulnerabilities
We track 4 vulnerabilities in Skops-dev products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 8, 2025.
Latest Skops-dev vulnerabilities
- 8.4 High severity
skops: Deserialization of Untrusted Data
skops is a Python library which helps users share and ship their scikit-learn based models. In versions 0.12.0 and below, the Card.get_model does not contain any logic to prevent arbitrary code execution. The Card.get_model function supports both joblib and sk
- 8.7 High severity
skops: Insufficient Type Distinction
skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, which can be exploited to access unexpected object fields through dot notation. This can be used to ac
- 8.7 High severity
skops: Insufficient Type Distinction
skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be exploited to hide the execution of untrusted operator methods. This can then be u
- 7.8 High severity
Skops: Deserialization of Untrusted Data
Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end user's system when loaded.