Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
0.11	✅
< 0.11	❌

Reporting a Vulnerability

Please report security vulnerabilities by opening a new GitHub security advisory.

MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time
GHSA-4v6w-xpmh-gfgp published Jul 25, 2025 by adrinjalali
High
Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution
GHSA-m7f4-hrc6-fwg3 published Jul 25, 2025 by adrinjalali
High
Card.get_model happily allows arbitrary code execution
GHSA-378x-6p4f-8jgm published Aug 7, 2025 by adrinjalali
High

Learn more about advisories related to skops-dev/skops in the GitHub Advisory Database