CVE-2024-37062

Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded...

CVE-2024-37062

The CVE-2024-37062 entry concerns deserialization of untrusted data in the ydata-profiling library. Affected software: ydata-profiling versions 3.7.0 and newer. Root cause: inadequate input validation in the loads function within serialize_report.py, enabling arbitrary code execution when loading...