CVE-2024-45857High · CVSS 7.8EPSS 0.24%No fix publishedCVE-2024-45857Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously crafted datalab.pkl file to run arbitrary code on an end user’s system when the data directory is loaded.cleanlabPythonPublished September 12, 2024Updated September 12, 2024Source advisory 1 ↗Source advisory 2 ↗