Log in Start free

Skops-dev

Products

ProductCVEsExploitedLatest
Skops4–Aug 8, 2025

Exploited and recent CVEs

  • CVE-2025-54886 High 8.4 skops: Card.get_model does not block arbitrary code execution 0.2%
  • CVE-2025-54413 High 8.7 skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time 0.2%
  • CVE-2025-54412 High 8.7 skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution 0.2%
  • CVE-2024-37065 High 7.8 Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end user's system when loaded. 0.2%