vulnerability

FreeBSD: VID-845f8430-d0ee-4134-ae35-480a3e139b8a (CVE-2022-21797): py39-joblib -- arbitrary code execution

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

Apr 9, 2023

Added

Apr 14, 2023

Modified

Jun 15, 2026

Description

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.

Solution

freebsd-upgrade-package-py39-joblib

References

CVE-2022-21797
https://attackerkb.com/topics/CVE-2022-21797
CWE-94
EUVD-EUVD-2022-0128
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0128

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report