Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Skops-dev vulnerabilities

4 published CVEs name Skops-dev among the affected products.

Published CVEs
4
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 4Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 20253

Newest CVEs

  • CVE-2025-54886

    skops: Card.get_model does not block arbitrary code execution

    skops-dev · skops

    High8.4
  • CVE-2025-54413

    skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time

    skops-dev · skops

    High8.7
  • CVE-2025-54412

    skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution

    skops-dev · skops

    High8.7
  • CVE-2024-37065

    Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on…

    Skops-dev · Skops

    High7.8

Products with the most CVEs

  1. Skops4

Most common weaknesses

  1. CWE-351 2
  2. CWE-502 Deserialization of untrusted data2