Numfocus

numfocus

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Pandas

pandas

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-13091 1Numfocus 1Pandas Jun 17, 2026 May 15, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the rea...Show more pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the read_pickle() function is documented as unsafe and it is the user's responsibility to use the function in a secure mannerShow less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-13091

1Numfocus

1Pandas

Jun 17, 2026

May 15, 2020

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the read_pickle() function is documented as unsafe and it is the user's responsibility to use the function in a secure mannerShow less