Lucene search
Ubuntu.comUB:CVE-2024-34997HistoryMay 17, 2024 - 12:00 a.m.
CVE-2024-34997
2024-05-1700:00:00
ubuntu.com
ubuntu.com
11
cve-2024-34997
joblib
deserialization vulnerability
numpyarraywrapper
unix
DISPUTED joblib v1.4.2 was discovered to contain a deserialization
vulnerability via the component
joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is
disputed by the supplier because NumpyArrayWrapper is only used during
caching of trusted content.
Related
ibm
ibm
Security Bulletin: IBM Maximo Application Suite Predict Component includes joblib-1.4.0-py3-none-any.whl which is vulnerable to this CVE-2024-34997
2024-07-31 07:43:27
vulnrichment
vulnrichment
CVE-2024-34997
2024-05-17 00:00:00
debiancve
debiancve
CVE-2024-34997
2024-05-17 19:15:07
nvd
nvd
CVE-2024-34997
2024-05-17 19:15:07
cve
cve
CVE-2024-34997
2024-05-17 19:15:07
osv
osv
CVE-2024-34997
2024-05-17 19:15:07
veracode
veracode
Deserialization Of Untrusted Data
2024-05-22 06:12:37
cvelist
cvelist
CVE-2024-34997
2024-05-17 00:00:00
redhatcve
redhatcve
CVE-2024-34997
2024-05-20 18:46:18