FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-05-29 17:22:06 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
845f8430-d0ee-4134-ae35-480a3e139b8apy39-joblib -- arbitrary code execution

jimlinntu reports:

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.


Discovery 2022-09-26
Entry 2023-04-09
py39-joblib
< 1.2.0

CVE-2022-21797
https://osv.dev/vulnerability/PYSEC-2022-288
https://osv.dev/vulnerability/GHSA-6hrg-qmvc-2xh8