https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-31224.htmlhttps://patchthecve.com/cve/CVE-2026-31224.htmlMon, 19 Oct 2026 22:10:00 +0000HIGH 8.8: The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of the MultitaskClassifier class. The method loads model weight files using torch.load() without enabling the security-restrictive weights_only=True parameter. This https://patchthecve.com/cve/CVE-2026-31223.htmlhttps://patchthecve.com/cve/CVE-2026-31223.htmlMon, 19 Oct 2026 22:10:00 +0000HIGH 8.8: The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load() function on user-supplied file paths without any validation or sehttps://patchthecve.com/cve/CVE-2026-31222.htmlhttps://patchthecve.com/cve/CVE-2026-31222.htmlMon, 19 Oct 2026 22:10:00 +0000HIGH 8.8: The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class. The method loads model checkpoint files using torch.load() without enabling the security-restrictive weights_only=True parameter. This default behavior all