SKOPS Card.get_model happily allows arbitrary code execution
Modified: 7/7/2026
package
pkg:pypi/skops
SKOPS Card.get_model happily allows arbitrary code execution
Modified: 7/7/2026
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
Modified: 7/7/2026
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
Modified: 7/7/2026
Skops unsafe deserialization
Modified: 7/7/2026
SKOPS Card.get_model happily allows arbitrary code execution
Modified: 7/7/2026
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
Modified: 7/7/2026
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
Modified: 7/7/2026
Skops unsafe deserialization
Modified: 7/7/2026