Skip to content

SEC avoid loading a non-bit generator object in numpy random generator - #536

Merged
adrinjalali merged 3 commits into
skops-dev:mainfrom
adrinjalali:fix-ghsa-qphp-randomgen
Sep 15, 2026
Merged

adrinjalali merged 3 commits into
skops-dev:mainfrom
adrinjalali:fix-ghsa-qphp-randomgen

Conversation

@adrinjalali

Copy link
Copy Markdown
Member

This fixes an issue where we import an arbitrary member of numpy.random and pass it to a constructor.

@adrinjalali
adrinjalali merged commit 12edfc9 into skops-dev:main Sep 15, 2026
30 checks passed
@adrinjalali
adrinjalali deleted the fix-ghsa-qphp-randomgen branch September 15, 2026 10:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant