222 matches found
CVE-2024-28188 jupyter-scheduler's endpoint is missing authentication
Jupyter Scheduler is collection of extensions for programming jobs to run now or run on a schedule. The list of conda environments of jupyter-scheduler users maybe be exposed, potentially revealing information about projects that a specific user may be working on. This vulnerability has been...
Jupyter Scheduler 安全漏洞
Jupyter Scheduler is a JupyterLab extension for running laptop jobs from the Jupyter organization. A security vulnerability exists in Jupyter Scheduler that stems from the fact that a user's list of conda environments may be publicly available, potentially revealing information about the projects...
PT-2024-22321
Name of the Vulnerable Software and Affected Versions Jupyter Scheduler versions 1.0.0 through 1.1.5 Jupyter Scheduler version 1.2.0 Jupyter Scheduler versions 1.3.0 through 1.8.1 Jupyter Scheduler versions 2.0.0 through 2.5.1 Description Jupyter Scheduler is a collection of extensions for...
Fedora 39 : python-geopandas (2023-1c5e667fd0)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1c5e667fd0 advisory. Update to latest version; fix CVE-2023-47248 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...
Fedora 37 : python-geopandas (2023-8857bdcd95)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8857bdcd95 advisory. Update to latest version; fix CVE-2023-47248 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...
CVE-2023-47248
Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources for example user-supplied input files. This vulnerability only...
Deserialization of untrusted data
Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources for example user-supplied input files. This vulnerability only...
CVE-2023-47248 PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file
Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources for example user-supplied input files. This vulnerability only...
GHSA-JM77-QPHF-C4W8 vulnerabilities
Vulnerabilities for packages: mitmproxy, py3-cassandra-medusa, conda...
GHSA-JM77-QPHF-C4W8 vulnerabilities
Vulnerabilities for packages: conda, py3-cassandra-medusa, mitmproxy...
CVE-2023-37920 vulnerabilities
Vulnerabilities for packages: kube-downscaler, conda...
CVE-2023-37920 vulnerabilities
Vulnerabilities for packages: conda, kube-downscaler...
GHSA-XQR8-7JWR-RHP7 vulnerabilities
Vulnerabilities for packages: conda, kube-downscaler...
GHSA-XQR8-7JWR-RHP7 vulnerabilities
Vulnerabilities for packages: kube-downscaler, conda...
GHSA-CF7P-GM2M-833M vulnerabilities
Vulnerabilities for packages: conda...
GHSA-CF7P-GM2M-833M vulnerabilities
Vulnerabilities for packages: conda...
CVE-2023-38325 vulnerabilities
Vulnerabilities for packages: conda...
CVE-2023-38325 vulnerabilities
Vulnerabilities for packages: conda...