CVE-2026-10705 dask HLL hyperloglog.py nunique_approx resource consumption

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

EUVD-2026-34064

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

CVE-2026-10705

CVE-2026-10705 affects dask up to 3.0, specifically the nunique_approx function in dask/dataframe/hyperloglog.py (HLL Handler). The flaw enables resource consumption and is exploitable remotely; attack complexity is reported as high. A fix is pending review (pull request awaiting acceptance). The...

CVE-2026-10705 dask HLL hyperloglog.py nunique_approx resource consumption

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

PT-2026-45899

A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique approx of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

Dask security vulnerabilities

Dask is a parallel computing library developed by Dask with task scheduling capabilities. Versions of Dask 3.0 and earlier contained security vulnerabilities, which originated from the function nuniqueapprox in the HLL Handler component located in the file dask/dataframe/hyperloglog.py. These...

CVE-2026-10705: Uncontrolled Resource Consumption

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

Linux Distros Unpatched Vulnerability : CVE-2026-10705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL...

GHSA-P423-J2CM-9VMQ vulnerabilities

Vulnerabilities for packages: mycli, open-webui, kubeflow-pipelines-visualization-server, datadog-agent, kserve, in-toto, k8s-sidecar, airflow, kubeflow-volumes-web-app, mitmproxy, superset, py3-cassandra-medusa, ggshield, dask-kubernetes, kubeflow-jupyter-web-app, jupyter-base-notebook, mlflow,...

CVE-2026-39892 vulnerabilities

Vulnerabilities for packages: mycli, open-webui, kubeflow-pipelines-visualization-server, datadog-agent, kserve, in-toto, k8s-sidecar, airflow, kubeflow-volumes-web-app, mitmproxy, superset, py3-cassandra-medusa, ggshield, dask-kubernetes, kubeflow-jupyter-web-app, jupyter-base-notebook, mlflow,...

CVE-2026-39892 vulnerabilities

Vulnerabilities for packages: label-studio, airflow-core, openstack-kolla-toolbox-2025.2, apache-beam-python-3.13-sdk, py3-cassandra-medusa, gitlab-cng-fips, k8s-sidecar, tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9, ggshield, barman, in-toto, kubeflow-jupyter-web-app, mitmproxy,...

GHSA-P423-J2CM-9VMQ vulnerabilities

Vulnerabilities for packages: label-studio, airflow-core, openstack-kolla-toolbox-2025.2, apache-beam-python-3.13-sdk, py3-cassandra-medusa, gitlab-cng-fips, k8s-sidecar, tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9, ggshield, barman, in-toto, kubeflow-jupyter-web-app, mitmproxy,...

Cross Site Scripting

distributed is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user-controlled input in the Dask dashboard when accessed via Jupyter Lab and jupyter-server-proxy, allowing attackers to craft a malicious URL that triggers script execution and results in...

GHSA-6VGW-5PG2-W6JP vulnerabilities

Vulnerabilities for packages: datadog-agent, pypy-3.10, dask-gateway, py3-cassandra-medusa, kubeflow-katib, py3-virtualenv...

CVE-2026-1703 vulnerabilities

Vulnerabilities for packages: datadog-agent, pypy-3.10, dask-gateway, py3-cassandra-medusa, kubeflow-katib, py3-virtualenv...

CVE-2026-1703 vulnerabilities

Vulnerabilities for packages: dask-gateway, kubeflow-katib, py3-cassandra-medusa, awx, tensorflow-gpu-jupyter, py3-virtualenv, graalvm, pypy-3.10, nvidia-nsight-compute-13.1, ansible-operator, nemo, request-1276, localstack, airflow, tensorflow-cpu-jupyter, datadog-agent, pgadmin4,...

GHSA-6VGW-5PG2-W6JP vulnerabilities

Vulnerabilities for packages: dask-gateway, kubeflow-katib, py3-cassandra-medusa, awx, tensorflow-gpu-jupyter, py3-virtualenv, graalvm, pypy-3.10, nvidia-nsight-compute-13.1, ansible-operator, nemo, request-1276, localstack, airflow, tensorflow-cpu-jupyter, datadog-agent, pgadmin4,...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: open-webui, kserve, datadog-agent, py3-setuptools, pypy-3.10, airflow, emissary, pypy-3.11, superset, py3-cassandra-medusa, kubeflow-katib, dask-kubernetes, mlflow, kubeflow-jupyter-web-app, semgrep...