CVE-2025-69224 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kserve, checkov, dask-kubernetes, airflow...

CVE-2025-69228 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kserve, checkov, dask-kubernetes, airflow...

CVE-2025-69225 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kserve, checkov, dask-kubernetes, airflow...

GHSA-6JHG-HG63-JVVF vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kserve, checkov, dask-kubernetes, airflow...

GHSA-69F9-5GXW-WVC2 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kserve, checkov, dask-kubernetes, airflow...

CVE-2025-69226 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kserve, checkov, dask-kubernetes, airflow...

GHSA-54JQ-C3M8-4M76 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kserve, checkov, dask-kubernetes, airflow...

GHSA-MQQC-3GQH-H2X8 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kserve, checkov, dask-kubernetes, airflow...

PT-2026-3268

Name of the Vulnerable Software and Affected Versions Dask distributed versions prior to 2026.1.0 Description When Jupyter Lab, jupyter-server-proxy, and Dask distributed are used together, a crafted URL can lead to code execution by Jupyter due to a cross-site scripting XSS issue in the Dask...

Malicious code in raft-dask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 030a53a896f5df53ae7114349ea26d0d00d132929f557c6b16ce9e2cdb217a0d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

EUVD-2025-201887

Malicious code in raft-dask PyPI...

MAL-2025-192382 Malicious code in raft-dask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 030a53a896f5df53ae7114349ea26d0d00d132929f557c6b16ce9e2cdb217a0d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

EUVD-2021-0050

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-42343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or...

CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, airflow, dask-kubernetes...

GHSA-9548-QRRJ-X5PJ vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, airflow, dask-kubernetes...

CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: airflow, request-1276, apache-beam-python-3.11-sdk, airflow-core, py3.13-scanner-test-libraries-aiohttp, py3-cassandra-medusa, text-generation-inference, dask-kubernetes, py3-vllm-cuda-12.4...

GHSA-9548-QRRJ-X5PJ vulnerabilities

Vulnerabilities for packages: airflow, request-1276, apache-beam-python-3.11-sdk, airflow-core, py3.13-scanner-test-libraries-aiohttp, py3-cassandra-medusa, text-generation-inference, dask-kubernetes, py3-vllm-cuda-12.4...

GHSA-XQGJ-R6XV-9CW4 Withdrawn Advisory: Dask Vulnerable to Command Injection

Withdrawn Advisory This advisory has been withdrawn because it describes intended functionality. This link is maintained to preserve external references. Original Description Dask versions =2024.8.2 contain a vulnerability in the Dask Distributed Server where the use of pickle serialization allow...

Withdrawn Advisory: Dask Vulnerable to Command Injection

Withdrawn Advisory This advisory has been withdrawn because it describes intended functionality. This link is maintained to preserve external references. Original Description Dask versions =2024.8.2 contain a vulnerability in the Dask Distributed Server where the use of pickle serialization allow...