HIGH8.4PyPI
PYSEC-2026-1925· CVE-2025-54886, GHSA-378x-6p4f-8jgmSKOPS Card.get_model happily allows arbitrary code execution
Modified: 7/7/2026
package
PyPI/skops
pkg:pypi/skops
—PyPI
PYSEC-2026-1926· CVE-2025-54413, GHSA-4v6w-xpmh-gfgpSkops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
Modified: 7/7/2026
—PyPI
PYSEC-2026-1927· CVE-2025-54412, GHSA-m7f4-hrc6-fwg3Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
Modified: 7/7/2026
HIGH7.8PyPI
PYSEC-2026-1928· CVE-2024-37065, GHSA-q49c-6v6g-wgq3Skops unsafe deserialization
Modified: 7/7/2026
HIGH8.4PyPI
GHSA-378x-6p4f-8jgm· CVE-2025-54886, PYSEC-2026-1925SKOPS Card.get_model happily allows arbitrary code execution
Modified: 7/7/2026
HIGHPyPI
GHSA-4v6w-xpmh-gfgp· CVE-2025-54413, PYSEC-2026-1926Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
Modified: 7/7/2026
HIGHPyPI
GHSA-m7f4-hrc6-fwg3· CVE-2025-54412, PYSEC-2026-1927Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
Modified: 7/7/2026
HIGH7.8PyPI
GHSA-q49c-6v6g-wgq3· CVE-2024-37065, PYSEC-2026-1928Skops unsafe deserialization
Modified: 7/7/2026