What’s Vulnerable › Products

skops-dev skops vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your skops-dev skops version is affected

Latest skops-dev skops vulnerabilities

• CVE-2025-54886 — skops: Card.get_model does not block arbitrary code execution (CVSS 8.4)
• CVE-2025-54413 — skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time (CVSS 8.7)
• CVE-2025-54412 — skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution (CVSS 8.7)
• CVE-2024-37065 — (CVSS 7.8)