134 matches found
PT-2026-45899
A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique approx of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...
Dask 安全漏洞
Dask is a parallel computing library developed by Dask with task scheduling capabilities. Versions of Dask 3.0 and earlier contained security vulnerabilities, which originated from the function nuniqueapprox in the HLL Handler component located in the file dask/dataframe/hyperloglog.py. These...
Linux Distros Unpatched Vulnerability : CVE-2026-10705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, kubeflow-pipelines-visualization-server, mycli, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, mitmproxy, py3-cassandra-medusa, kserve, ggshield, dask-kubernetes, open-webui, semgrep, in-toto, airflow, superset, datadog-agent, jupyter-base-notebook...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: k8s-sidecar, kubeflow-pipelines-visualization-server, mycli, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, mitmproxy, py3-cassandra-medusa, kserve, ggshield, dask-kubernetes, open-webui, semgrep, in-toto, airflow, superset, datadog-agent, jupyter-base-notebook...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: airflow-core, localstack, semgrep, barman, kserve, pgadmin4, kubeflow-volumes-web-app, authentik, airflow, pgadmin4-fips, apache-beam-python-3.13-sdk, jupyter-base-notebook, nemo, in-toto, open-webui, label-studio, openstack-kolla-toolbox-2025.1, vllm-openai-cuda-12....
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: airflow-core, localstack, semgrep, barman, kserve, pgadmin4, kubeflow-volumes-web-app, authentik, airflow, pgadmin4-fips, apache-beam-python-3.13-sdk, jupyter-base-notebook, nemo, in-toto, open-webui, label-studio, openstack-kolla-toolbox-2025.1, vllm-openai-cuda-12....
Cross Site Scripting
distributed is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user-controlled input in the Dask dashboard when accessed via Jupyter Lab and jupyter-server-proxy, allowing attackers to craft a malicious URL that triggers script execution and results in...
CVE-2026-1703 vulnerabilities
Vulnerabilities for packages: pypy-3.10, dask-gateway, kubeflow-katib, py3-virtualenv, py3-cassandra-medusa, datadog-agent...
GHSA-6VGW-5PG2-W6JP vulnerabilities
Vulnerabilities for packages: pypy-3.10, dask-gateway, kubeflow-katib, py3-virtualenv, py3-cassandra-medusa, datadog-agent...
CVE-2026-1703 vulnerabilities
Vulnerabilities for packages: localstack, pgadmin4, pgadmin4-fips, airflow, dask-gateway, kubeflow-katib, py3-virtualenv, ansible-operator-fips, nemo, tensorflow-cpu-jupyter, graalvm, tensorflow-gpu-jupyter, nvidia-nsight-compute-13.2, ansible-operator, nvidia-nsight-compute-13.1, pypy-3.10,...
GHSA-6VGW-5PG2-W6JP vulnerabilities
Vulnerabilities for packages: localstack, pgadmin4, pgadmin4-fips, airflow, dask-gateway, kubeflow-katib, py3-virtualenv, ansible-operator-fips, nemo, tensorflow-cpu-jupyter, graalvm, tensorflow-gpu-jupyter, nvidia-nsight-compute-13.2, ansible-operator, nvidia-nsight-compute-13.1, pypy-3.10,...
CVE-2026-23949 vulnerabilities
Vulnerabilities for packages: pypy-3.10, mlflow, kubeflow-katib, kubeflow-jupyter-web-app, py3-cassandra-medusa, kserve, py3-setuptools, dask-kubernetes, open-webui, pypy-3.11, semgrep, airflow, superset, datadog-agent, emissary...
CVE-2026-23949 vulnerabilities
Vulnerabilities for packages: localstack, semgrep, kserve, pgadmin4, dbt-bigquery, authentik, airflow, kubeflow-katib, tritonserver-backend-vllm-cuda-12.9, ansible-operator-fips, nemo, tensorflow-cpu-jupyter, py3.9-setuptools, open-webui, tensorflow-gpu-jupyter, label-studio, mlflow, spamcheck,...
CVE-2026-23528 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, dask-gateway...
GHSA-58PV-8J8X-9VJ2 vulnerabilities
Vulnerabilities for packages: pypy-3.10, mlflow, kubeflow-katib, kubeflow-jupyter-web-app, py3-cassandra-medusa, kserve, py3-setuptools, dask-kubernetes, open-webui, pypy-3.11, semgrep, airflow, superset, datadog-agent, emissary...
GHSA-C336-7962-WFJ2 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, dask-gateway...
GHSA-58PV-8J8X-9VJ2 vulnerabilities
Vulnerabilities for packages: localstack, semgrep, kserve, pgadmin4, dbt-bigquery, authentik, airflow, kubeflow-katib, tritonserver-backend-vllm-cuda-12.9, ansible-operator-fips, nemo, tensorflow-cpu-jupyter, py3.9-setuptools, open-webui, tensorflow-gpu-jupyter, label-studio, mlflow, spamcheck,...