repository icon
scikit-optimize / scikit-optimize Project repository

Sequential model-based optimization with a `scipy.optimize` interface

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN22 DAYS

FIX

WITHINN/A DAYS

Unsafe joblib.load() in skopt.load() Enables RCE via Malicious Optimization Resu...
odysseypro25-project
self closed
Arbitrary Code Execution via Unsafe Deserialization in skopt.load() wrapping job...
elucidator-hky
self closed
Unsafe deserialization in `skopt.utils.load` enables arbitrary code execution
f00dat
pending
Insecure Deserialization via pickle.load() leads to Remote Code Execution (RCE)...
evertrustai
duplicate
High
Scikit-Optimize Compatibility Issues Report
7908837174
pending
Scikit-Optimize Broken with Scikit-Learn 1.7+: Critical Parameter Deprecation I...
7908837174
pending
RCE via Pickle Deserialization in Optimizer State Loading
lau90eth
duplicate
Critical
Critical Insecure Deserialization in Scikit-optimize Enables Remote Code Executi...
jplopezy
self closed
RCE via Callable Injection in BayesSearchCV Search Space
mnqazi
pending
Arbitrary Code Execution (RCE) via Function Injection
mnqazi
pending