CVE-2026-95897

A security vulnerability exists in Dask up to version 2026.8.0 within the Loader component. The flaw is located in the from_npy_stack function of the dask/array/core.py file, where improper handling leads to deserialization issues. This vulnerability can be exploited via a remote attack . While t...

CVE-2026-95897

A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function fromnpystack of the file dask/array/core.py of the component Loader. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...

CVE-2026-95897: Deserialization of Untrusted Data

A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function fromnpystack of the file dask/array/core.py of the component Loader. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...

PT-2026-97119

Name of the Vulnerable Software and Affected Versions Dask versions prior to 2026.8.1 Description A remote deserialization issue exists within the Loader component. The flaw is located in the from npy stack function of the dask/array/core.py file, where improper handling of input can lead to the...

Security Bulletin: Vulnerability in dask affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in dask has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

CVE-2026-69244 vulnerabilities

Vulnerabilities for packages: open-webui, kserve, airflow, py3-cassandra-medusa, dask-kubernetes...

GHSA-CQ5V-8Q36-5273 vulnerabilities

Vulnerabilities for packages: open-webui, kserve, airflow, py3-cassandra-medusa, dask-kubernetes...

GHSA-MFX4-HV73-Q22V vulnerabilities

Vulnerabilities for packages: open-webui, kserve, airflow, py3-cassandra-medusa, dask-kubernetes...

CVE-2026-69243 vulnerabilities

Vulnerabilities for packages: open-webui, kserve, airflow, py3-cassandra-medusa, dask-kubernetes...

GHSA-MQ44-7P77-Q5H7 vulnerabilities

Vulnerabilities for packages: open-webui, kserve, airflow, py3-cassandra-medusa, dask-kubernetes...

CVE-2026-59881 vulnerabilities

Vulnerabilities for packages: open-webui, kserve, airflow, py3-cassandra-medusa, dask-kubernetes...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: synapse, lmcache-cuda-12.8, openstack-kolla-toolbox-2025.2-fips, openstack-horizon-2025.2, superset-fips, kubeflow-katib, openstack-kolla-toolbox-2025.2, azure-functions-host, py3-cassandra-medusa, jupyter-all-spark-notebook, openstack-keystone-2025.2-fips,...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: py3-pipenv, datadog-agent, airflow, pypy-3.11, mitmproxy, superset, py3-cassandra-medusa, kubeflow-katib, dask-kubernetes...

CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

SUSE CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

DEBIAN-CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

UBUNTU-CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

Improper Resource Shutdown or Release

Overview dask is a Parallel PyData with Task Scheduling Affected versions of this package are vulnerable to Improper Resource Shutdown or Release through the computehllarray function in the HLL Handler component. An attacker can cause excessive resource consumption by remotely invoking this...

CVE-2026-10705 dask HLL hyperloglog.py nunique_approx resource consumption

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...