Launchpad.net

CVE 2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.

See the CVE page on Mitre.org for more details.