skops-dev/skops Security Advisories | GitStock

high2025-08-07

SKOPS Card.get_model happily allows arbitrary code execution

GHSA-378x-6p4f-8jgm · CVE-2025-54886

high2025-07-25

Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time

GHSA-4v6w-xpmh-gfgp · CVE-2025-54413

high2025-07-25

Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution

GHSA-m7f4-hrc6-fwg3 · CVE-2025-54412

high2024-06-04

Skops unsafe deserialization

GHSA-q49c-6v6g-wgq3 · CVE-2024-37065