CVSS 3.1
7.2 highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2021-23338
High (7.2) in microsoft qlib. EPSS 3.6% chance of exploitation in the next 30 days. Fixed in pyqlib 0.6.3, 0.7.0.
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.
Severity
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-502
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:qlib
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-hjr4-fhgp-23g9 | PyPI | pyqlib | <0.7.0 | 0.7.0 |
| PYSEC-2021-86 | PyPI | pyqlib | <0.6.3 | 0.6.3 |