Skip to content

SEC tree nodes shouldn't be trusted since they can cause a segfault - #535

Merged
adrinjalali merged 4 commits into
skops-dev:mainfrom
adrinjalali:fix-ghsa-qjp4-untrusted-tree
Sep 15, 2026
Merged

adrinjalali merged 4 commits into
skops-dev:mainfrom
adrinjalali:fix-ghsa-qjp4-untrusted-tree

Conversation

@adrinjalali

Copy link
Copy Markdown
Member

Tree nodes cannot be trusted since they can give a segfault on predict with a malformed input.

cc @cakedev0

@adrinjalali
adrinjalali merged commit 1ae3980 into skops-dev:main Sep 15, 2026
30 checks passed
@adrinjalali
adrinjalali deleted the fix-ghsa-qjp4-untrusted-tree branch September 15, 2026 10:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant