Lucene search
MitreCVELIST:CVE-2024-34997HistoryMay 17, 2024 - 12:00 a.m.
CVE-2024-34997
2024-05-1700:00:00
mitre
www.cve.org
4
joblib
v1.4.2
deserialization
vulnerability
numpy_pickle
numpyarraywrapper
read_array
caching
trusted content
joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.
Related
ibm
ibm
Security Bulletin: IBM Maximo Application Suite Predict Component includes joblib-1.4.0-py3-none-any.whl which is vulnerable to this CVE-2024-34997
2024-07-31 07:43:27
vulnrichment
vulnrichment
CVE-2024-34997
2024-05-17 00:00:00
debiancve
debiancve
CVE-2024-34997
2024-05-17 19:15:07
nvd
nvd
CVE-2024-34997
2024-05-17 19:15:07
cve
cve
CVE-2024-34997
2024-05-17 19:15:07
osv
osv
CVE-2024-34997
2024-05-17 19:15:07
veracode
veracode
Deserialization Of Untrusted Data
2024-05-22 06:12:37
ubuntucve
ubuntucve
CVE-2024-34997
2024-05-17 00:00:00
redhatcve
redhatcve
CVE-2024-34997
2024-05-20 18:46:18