CVE-2026-19024

A flaw was found in HDF5. A local attacker could exploit a vulnerability in the H5Pgetfillvalue function by providing a specially crafted dataset. This could lead to a denial of service, making the system unavailable. Mitigation To reduce risk prior to patching, restrict processing HDF5 files fro...

CVE-2024-37064: Deserialization of Untrusted Data

Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a maliciously crafted dataset to run arbitrary code on an end user's system when loaded...