CVE-2024-5206: scikit-learn TfidfVectorizer leaks sensitive training tokens via stop_words_

Summary

CVE-2024-5206 affects scikit-learn's TfidfVectorizer in versions up to and including 1.4.1.post1. The vectorizer stores every token from the training data in its `stop_words_` attribute, not only the tokens TF-IDF needs, so tokens meant to be discarded, such as passwords or keys, can be exposed. The impact depends on the data the vectorizer processes.

Mitigation

Fixed in 1.5.0

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• scikit-learnPyPINo LLM dependency detected · 74 tracked dependents

Topics

• Training data and privacy

Related items

• MediumCVE-2026-121938: langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerability that allows authenticated…Similar attack · NVD/CVE Database
• InfoResidual Attribute Leakage Is an Interface: Auditing Privacy Evaluation After Text De-identificationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumHundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake FeaturesSimilar attack · Wired (Security)
• MediumNew VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial ValueSimilar attack · The Hacker News
• InfoAccessed, never disclosed: Silent access to protected health information by medical artificial intelligence agentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)