Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jim Lin

#26042of 53,624
9.8Total CVSS
Vulnerabilities · 1
PT-2022-15136
9.8
2022-09-20
Joblib · Joblib · CVE-2022-21797
**Name of the Vulnerable Software and Affected Versions** joblib versions 0 through 1.2.0 **Description** The issue concerns Arbitrary Code Execution via the `pre dispatch` flag in the `Parallel()` class due to the `eval()` statement. **Recommendations** For joblib versions 0 through 1.2.0, update to version 1.2.0 or later to resolve the issue. As a temporary workaround, consider disabling the `eval()` statement in the `Parallel()` class until a patch is available. Restrict access to the `pre dispatch` flag to minimize the risk of exploitation.