Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Skops-dev vulnerabilities

4 published CVEs name Skops-dev among the affected products.

Newest CVEs

  • CVE-2025-54886

    skops: Card.get_model does not block arbitrary code execution

    skops-dev · skops

    High8.4
  • CVE-2025-54413

    skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time

    skops-dev · skops

    High8.7
  • CVE-2025-54412

    skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution

    skops-dev · skops

    High8.7
  • CVE-2024-37065

    Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on…

    Skops-dev · Skops

    High7.8