Joblib · Joblib · CVE-2022-21797
**Name of the Vulnerable Software and Affected Versions**
joblib versions 0 through 1.2.0
**Description**
The issue concerns Arbitrary Code Execution via the `pre dispatch` flag in the `Parallel()` class due to the `eval()` statement.
**Recommendations**
For joblib versions 0 through 1.2.0, update to version 1.2.0 or later to resolve the issue. As a temporary workaround, consider disabling the `eval()` statement in the `Parallel()` class until a patch is available. Restrict access to the `pre dispatch` flag to minimize the risk of exploitation.