Snorkel vulnerabilities
We track 3 vulnerabilities in Snorkel products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.
Latest Snorkel vulnerabilities
- 8.8 High severity
Snorkel: Deserialization of Untrusted Data
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of the MultitaskClassifier class. The method loads model weight files using torch.load() without enabling the security-restri
- 8.8 High severity
Snorkel: Deserialization of Untrusted Data
The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load() function on user-supplied
- 8.8 High severity
Snorkel: Deserialization of Untrusted Data
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class. The method loads model checkpoint files using torch.load() without enabling the security-restrictive weights_only=T