134 matches found
CVE-2025-69225 vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kserve, dask-kubernetes, open-webui, airflow...
CVE-2025-69228 vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kserve, dask-kubernetes, open-webui, airflow...
GHSA-6JHG-HG63-JVVF vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kserve, dask-kubernetes, open-webui, airflow...
GHSA-54JQ-C3M8-4M76 vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kserve, dask-kubernetes, open-webui, airflow...
GHSA-MQQC-3GQH-H2X8 vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kserve, dask-kubernetes, open-webui, airflow...
CVE-2025-69226 vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kserve, dask-kubernetes, open-webui, airflow...
GHSA-69F9-5GXW-WVC2 vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kserve, dask-kubernetes, open-webui, airflow...
PT-2026-3268
Name of the Vulnerable Software and Affected Versions Dask distributed versions prior to 2026.1.0 Description When Jupyter Lab, jupyter-server-proxy, and Dask distributed are used together, a crafted URL can lead to code execution by Jupyter due to a cross-site scripting XSS issue in the Dask...
EUVD-2025-201887
Malicious code in raft-dask PyPI...
Malicious code in raft-dask (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 030a53a896f5df53ae7114349ea26d0d00d132929f557c6b16ce9e2cdb217a0d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-192382 Malicious code in raft-dask (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 030a53a896f5df53ae7114349ea26d0d00d132929f557c6b16ce9e2cdb217a0d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
EUVD-2021-0050
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2021-42343
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or...
CVE-2025-53643 vulnerabilities
Vulnerabilities for packages: airflow, py3-cassandra-medusa, dask-kubernetes...
GHSA-9548-QRRJ-X5PJ vulnerabilities
Vulnerabilities for packages: airflow, py3-cassandra-medusa, dask-kubernetes...
CVE-2025-53643 vulnerabilities
Vulnerabilities for packages: airflow-core, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, py3-cassandra-medusa, airflow, py3-vllm-cuda-12.4, request-1276, dask-kubernetes, text-generation-inference...
GHSA-9548-QRRJ-X5PJ vulnerabilities
Vulnerabilities for packages: airflow-core, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, py3-cassandra-medusa, airflow, py3-vllm-cuda-12.4, request-1276, dask-kubernetes, text-generation-inference...
GHSA-XQGJ-R6XV-9CW4 Withdrawn Advisory: Dask Vulnerable to Command Injection
Withdrawn Advisory This advisory has been withdrawn because it describes intended functionality. This link is maintained to preserve external references. Original Description Dask versions =2024.8.2 contain a vulnerability in the Dask Distributed Server where the use of pickle serialization allow...
Withdrawn Advisory: Dask Vulnerable to Command Injection
Withdrawn Advisory This advisory has been withdrawn because it describes intended functionality. This link is maintained to preserve external references. Original Description Dask versions =2024.8.2 contain a vulnerability in the Dask Distributed Server where the use of pickle serialization allow...
