PatchTheCVEsnorkel vulnerabilities and fixes
Recent CVEs affecting snorkel, with upgrade or downgrade steps. 3 tracked.
snorkel has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-05-12. Highest priority: CVE-2026-31222 (score 39/100).
- CVE-2026-31222 HIGH 8.8 UPGRADE The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.l
- CVE-2026-31223 HIGH 8.8 UPGRADE The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the B
- CVE-2026-31224 HIGH 8.8 UPGRADE The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Multitask
FAQ
How do I fix snorkel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is snorkel being exploited right now?
None of the tracked snorkel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which snorkel CVE should I patch first?
CVE-2026-31222 currently ranks highest (39/100): The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.l.