biome-text (1.0.0rc1), holoviz (>=0.11.5, <=0.11.6) potentially affected by CVE-2021-42343 via dask (2.17.2)

dask PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - biome-text 1.0.0rc1 - holoviz =0.11.5, =0.11.6 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

allelica-pkg-nico-4d (1.0.3), ambulance-game (>=0.0.1, <=0.0.7) +45 more potentially affected by CVE-2021-42343 via dask (>=2021.1.1, <=2021.9.1)

dask PYPI version =2021.1.1, =0.0.1, =1.5.2, =0.2.4, =1.47.0, =1.47.0, =1.47.0, =1.47.0, =1.47.0.post1, =1.33.1, =0.19.0a210422, =0.3.2, =4.5.0, =4.6.0 and more Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

cellphonedbu (>=1.1.1.5, <=1.1.1.7) potentially affected by CVE-2021-42343 via dask (1.1.4)

dask PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - cellphonedbu =1.1.1.5, =1.1.1.7 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

PYSEC-2021-871

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

dataprep (>=0.2.2, <=0.2.10) potentially affected by CVE-2021-42343 via dask (2.13.0)

dask PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dataprep =0.2.2, =0.2.10 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

dye-score (0.1.0) potentially affected by CVE-2021-42343 via dask (1.1.5)

dask PYPI version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dye-score 0.1.0 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

dataprep (>=0.1.0a1, <=0.2.1) potentially affected by CVE-2021-42343 via dask (2.9.2)

dask PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dataprep =0.1.0a1, =0.2.1 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

pyafq (>=0.4.0, <=0.6.0) potentially affected by CVE-2021-42343 via dask (1.1.0)

dask PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - pyafq =0.4.0, =0.6.0 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

alphabetsoup (0.5.3), atlite (0.2.3) +41 more potentially affected by CVE-2021-42343 via dask (2.30.0)

dask PYPI version 2.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - alphabetsoup 0.5.3 - atlite 0.2.3 - azulejo =0.6.0, =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.0, =3.0.0.dev1, =0.1.0, =0.9.22.post0, =0.1.0,...

CVE-2021-42343

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

CVE-2021-42343

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

PYSEC-2021-387

An issue was discovered in Dask aka python-dask through 2021.09.1. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on external interfaces...

PYSEC-2021-387

An issue was discovered in Dask aka python-dask through 2021.09.1. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on external interfaces...

PYSEC-2021-872

Withdrawn as duplicate of PYSEC-2021-871. An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their...

PYSEC-2021-872

Withdrawn as duplicate of PYSEC-2021-871. An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their...

UBUNTU-CVE-2021-42343

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

Remote code execution

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

dataverk (0.2.13) potentially affected by CVE-2021-42343 via dask (2.0.0)

dask PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - dataverk 0.2.13 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

autogluon (>=0.0.5, <=0.0.7b17042020) potentially affected by CVE-2021-42343 via dask (2.6.0)

dask PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - autogluon =0.0.5, =0.0.7b17042020 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

tsfresh (0.11.0) potentially affected by CVE-2021-42343 via dask (0.15.2)

dask PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - tsfresh 0.11.0 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...