labbench vulnerabilities

CVEs whose affected-version data names the labbench package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120833High· 7.8

5d ago

labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch

labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone. Attackers who suppl…

▾ TwilightNIST · labbenchEPSS 0.14%via CVEORG