CVE-2024-5206
Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
- Record
CVE-2024-5206- CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-921
- Updated
- 2026-11-02
EUVDEUVD-2024-0161
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
- Record
EUVD-2024-0161- CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jw8x-6495-233v
scikit-learn sensitive data leakage vulnerability
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
- Record
GHSA-jw8x-6495-233v- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-921, CWE-922
- Updated
- 2026-11-02
NVD
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
- Record
CVE-2024-5206- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-921, CWE-922
- Updated
- 2026-11-02
OSV
Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
- Record
CVE-2024-5206- CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-921
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-5206
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
- Record
DEBIAN-CVE-2024-5206- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 9 moreShow less
OSVGHSA-jw8x-6495-233v
scikit-learn sensitive data leakage vulnerability
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
- Record
GHSA-jw8x-6495-233v- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-921, CWE-922
- Updated
- 2026-11-02
OSVOESA-2024-1745
python-scikit-learn security update
A Python module for machine learning built on top of SciPy
Security Fix(es):
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.(CVE-2024-5206)
- Record
OESA-2024-1745- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVPYSEC-2024-110
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
- Record
PYSEC-2024-110- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-5206
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
- Record
UBUNTU-CVE-2024-5206- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVCLSA-2026-1787201491 No score
TuxCare security update for scikit-learn (1 CVE)
TuxCare rebuilt scikit-learn to address 1 CVE. Fixed in 1.0.2.post2+tuxcare.
- Record
CLSA-2026-1787201491- Updated
- 2026-11-02
OSVMGASA-2024-0228 No score
Updated python-scikit-learn packages fix security vulnerability
A sensitive data leakage vulnerability was identified in scikit-learn's
TfidfVectorizer, specifically in versions up to and including
1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises
from the unexpected storage of all tokens present in the training data
within the stop_words_ attribute, rather than only storing the subset
of tokens required for the TF-IDF technique to function. This behavior
leads to the potential leakage of sensitive information, as the
stop_words_ attribute could contain tokens that were meant to be
discarded and not stored, such as passwords or keys. The impact of this
vulnerability varies based on the nature of the data being processed by
the vectorizer.
- Record
MGASA-2024-0228- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14043-1 No score
python310-scikit-learn-1.5.0-1.1 on GA media
These are all security issues fixed in the python310-scikit-learn-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14043-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11498-1 No score
python313-scikit-learn-1.9.0-1.1 on GA media
These are all security issues fixed in the python313-scikit-learn-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11498-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2029-1 No score
Security update for python-scikit-learn
This update for python-scikit-learn fixes the following issues:
-CVE-2024-5206: Fixed a possible sensitive data leak in TfidfVectorizer. (bsc#1226185)
- Record
SUSE-SU-2024:2029-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
scikit-learnPyPI |
before 1.5.0 | 1.5.0 |
scikit-learnTuxCare:PyPI |
1.0.2 up to 1.0.2.post2+tuxcare, plus listed versions 1.0.2.post1+tuxcare |
1.0.2.post2+tuxcare |
scikit-learnDebian:12 |
All versions, plus listed versions 1.2.1+dfsg-11.4.1.post1+dfsg-11.4.2+dfsg-11.4.2+dfsg-21.4.2+dfsg-3 Show 16 moreShow less1.4.2+dfsg-41.4.2+dfsg-51.4.2+dfsg-61.4.2+dfsg-71.4.2+dfsg-81.7.2+dfsg-11.7.2+dfsg-21.7.2+dfsg-31.7.2+dfsg-41.8.0+dfsg-11.8.0+dfsg-21.8.0+dfsg-31.8.0+dfsg-41.8.0+dfsg-51.9.0+dfsg-11.9.0+dfsg-2 |
None known |
scikit-learnDebian:13 |
All versions, plus listed versions 1.4.2+dfsg-81.7.2+dfsg-11.7.2+dfsg-21.7.2+dfsg-31.7.2+dfsg-4 Show 7 moreShow less1.8.0+dfsg-11.8.0+dfsg-21.8.0+dfsg-31.8.0+dfsg-41.8.0+dfsg-51.9.0+dfsg-11.9.0+dfsg-2 |
None known |
scikit-learnDebian:14 |
All versions, plus listed versions 1.4.2+dfsg-81.7.2+dfsg-11.7.2+dfsg-21.7.2+dfsg-31.7.2+dfsg-4 Show 7 moreShow less1.8.0+dfsg-11.8.0+dfsg-21.8.0+dfsg-31.8.0+dfsg-41.8.0+dfsg-51.9.0+dfsg-11.9.0+dfsg-2 |
None known |
scikit-learnPyPI |
before 1.5.0, plus listed versions 0.100.110.120.12.10.13 Show 45 moreShow less0.13.10.140.14.10.15.00.15.10.15.20.16.00.16.10.170.17.10.180.18.10.18.20.19.00.19.10.19.20.20.00.20.10.20.20.20.30.20.40.21.00.21.10.21.20.21.30.220.22.10.22.20.22.2.post10.23.00.23.10.23.20.24.00.24.10.24.20.91.01.0.11.0.21.1.01.1.11.1.21.1.31.2.01.2.0rc1 |
1.5.0 |
python-scikit-learnMageia:9 |
before 1.1.2-2.1.mga9 | 1.1.2-2.1.mga9 |
python-scikit-learnopenEuler:20.03-LTS-SP4 |
before 0.20.4-5.oe2003sp4 | 0.20.4-5.oe2003sp4 |
python-scikit-learnopenEuler:22.03-LTS-SP1 |
before 1.1.1-2.oe2203sp1 | 1.1.1-2.oe2203sp1 |
python-scikit-learnopenEuler:22.03-LTS-SP3 |
before 1.1.1-2.oe2203sp3 | 1.1.1-2.oe2203sp3 |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-scikit-learnopenEuler:24.03-LTS |
before 1.4.0-2.oe2403 | 1.4.0-2.oe2403 |
scikit-learnPyPI |
before 1.5.0, plus listed versions 0.100.110.120.12.10.13 Show 45 moreShow less0.13.10.140.14.10.15.00.15.10.15.20.16.00.16.10.170.17.10.180.18.10.18.20.19.00.19.10.19.20.20.00.20.10.20.20.20.30.20.40.21.00.21.10.21.20.21.30.220.22.10.22.20.22.2.post10.23.00.23.10.23.20.24.00.24.10.24.20.91.01.0.11.0.21.1.01.1.11.1.21.1.31.2.01.2.0rc1 |
1.5.0 |
python-scikit-learnSUSE:Linux Enterprise Module for Package Hub 15 SP5 |
before 0.23.2-150300.3.3.1 | 0.23.2-150300.3.3.1 |
python-scikit-learnSUSE:Linux Enterprise Module for Package Hub 15 SP6 |
before 0.23.2-150300.3.3.1 | 0.23.2-150300.3.3.1 |
python-scikit-learnopenSUSE:Leap 15.5 |
before 0.23.2-150300.3.3.1 | 0.23.2-150300.3.3.1 |
python-scikit-learnopenSUSE:Leap 15.6 |
before 0.23.2-150300.3.3.1 | 0.23.2-150300.3.3.1 |
scikit-learnUbuntu:14.04:LTS |
All versions, plus listed versions 0.13.1-10.14.1-10.14.1-2 |
None known |
scikit-learnUbuntu:16.04:LTS |
All versions, plus listed versions 0.16.1-20.17.0-4 |
None known |
scikit-learnUbuntu:18.04:LTS |
All versions, plus listed versions 0.19.0-1build10.19.1-10.19.1-20.19.1-3 |
None known |
scikit-learnUbuntu:20.04:LTS |
All versions, plus listed versions 0.20.3+dfsg-0ubuntu20.20.3+dfsg-0ubuntu30.22.2.post1+dfsg-5 |
None known |
scikit-learnUbuntu:22.04:LTS |
All versions, plus listed versions 0.23.2-5ubuntu20.23.2-5ubuntu40.23.2-5ubuntu6 |
None known |
scikit-learnUbuntu:24.04:LTS |
All versions, plus listed versions 1.2.1+dfsg-1build11.2.1+dfsg-1build21.4.1.post1+dfsg-11.4.1.post1+dfsg-1build1 |
None known |
scikit-learnUbuntu:25.10 |
All versions, plus listed versions 1.4.2+dfsg-8 |
None known |
scikit-learnUbuntu:26.10 |
All versions, plus listed versions 1.7.2+dfsg-4build11.9.0+dfsg-1 |
None known |
scikit-learnUbuntu:26.04:LTS |
All versions, plus listed versions 1.4.2+dfsg-81.7.2+dfsg-3ubuntu11.7.2+dfsg-41.7.2+dfsg-4build1 |
None known |
python-scikit-learnopenSUSE:Tumbleweed |
before 1.5.0-1.1 | 1.5.0-1.1 |
python-scikit-learnopenSUSE:Tumbleweed |
before 1.9.0-1.1 | 1.9.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-5206 is a medium vulnerability (CVSS 4.7) in Scikit-learn, published June 6, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in scikit-learn 1.5.0.
References
huntr.com/bounties/14bc0917-a85b-4106-a170-d09d5191517c
github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8
nvd.nist.gov/vuln/detail/CVE-2024-5206
Show 11 moreShow less
security-tracker.debian.org/tracker/CVE-2024-5206
advisories.mageia.org/MGASA-2024-0228.html
bugs.mageia.org/show_bug.cgi?id=33307
lists.opensuse.org/archives/list/[email protected]/message/RRNRD64XAZJHFLB6MHKCGUBBVTIA3E7V
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1745
suse.com/support/update/announcement/2024/suse-su-20242029-1
bugzilla.suse.com/1226185
ubuntu.com/security/CVE-2024-5206
cve.org/CVERecord?id=CVE-2024-5206
Left out here: 34 versions. The JSON record has them.