Every CVE whose affected-product data names Microsoft Qlib, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2021-23338 — CVSS 6.6 (medium): This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.