Skops-dev Skops

• CVE-2025-54886 High 8.4 skops: Card.get_model does not block arbitrary code execution 0.2%
• CVE-2025-54413 High 8.7 skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time 0.2%
• CVE-2025-54412 High 8.7 skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution 0.2%
• CVE-2024-37065 High 7.8 Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end user's system when loaded. 0.2%