CVE-2021-23338: Microsoft Qlib

High severity, CVSS 7.2. EPSS: 3.6% chance of exploitation in the next 30 days.

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.

Affected products

• Microsoft Qlib: any version

Published 2021-02-15. Last modified 2026-06-17.