NumfocusCVEs & Vulnerabilities

1 CVEs affecting Numfocus products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

pandas 1

CVE-2020-13091CRITICAL

pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the read_pickle() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner

15 May 2020

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database