Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Numfocus Subscribe
Filtered by product Pandas
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-13091 1 Numfocus 1 Pandas 2020-05-19 7.5 HIGH 9.8 CRITICAL
** DISPUTED ** pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the read_pickle() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner.