CVE-2021-23338
Deserialization of Untrusted Data
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.
CVSS 3.1 · 6.6 Medium
EPSS 3.9%
KEV · Not listed
Vendors
Products