View all vulnerabilities

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
Score Vector
Affected Versions
joblib < b90f10efeb670a2cc877fb88ebb3f2019189e059; joblib < 1.2.0
Severity
Ecosystem
Python
Publish Date
September 26, 2022
Modified Date
November 7, 2023