dataverk (0.2.13) potentially affected by CVE-2026-23528 via distributed (2.5.1)

distributed PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dataverk 0.2.13 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

complai-test (0.1.0), sphinxcontrib-jupyter (>=0.5.4, <=0.5.5) potentially affected by CVE-2026-23528 via distributed (2.5.2)

distributed PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - complai-test 0.1.0 - sphinxcontrib-jupyter =0.5.4, =0.5.5 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

azureml-automl-dnn-nlp (>=1.37.0, <=1.46.1.post1), azureml-automl-dnn-vision (>=1.37.0, <=1.46.1) +31 more potentially affected by CVE-2026-23528 via distributed (2.30.1)

distributed PYPI version 2.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.0, =0.9.22.post0, =0.1.0, =0.1.0, =0.1.0a1, =0.0.5, =0.0.5, =0.1...

fantasy-analysis (>=0.0.0, <=0.0.3), gam (1.1.1) potentially affected by CVE-2026-23528 via distributed (2021.2.0)

distributed PYPI version 2021.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - fantasy-analysis =0.0.0, =0.0.3 - gam 1.1.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dask-cuda (>=0.19.0a210422, <=0.19.0), llyr (0.1.0) potentially affected by CVE-2026-23528 via distributed (2021.4.0)

distributed PYPI version 2021.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =0.19.0a210422, =0.19.0 - llyr 0.1.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

sgm-data (>=0.3.10b0, <=0.3.13b0) potentially affected by CVE-2026-23528 via distributed (2021.8.0)

distributed PYPI version 2021.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - sgm-data =0.3.10b0, =0.3.13b0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

pyoptimus (21.9.0b4), sgm-data (>=0.3.14b0, <=0.3.15b0) +1 more potentially affected by CVE-2026-23528 via distributed (2021.9.0)

distributed PYPI version 2021.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - pyoptimus 21.9.0b4 - sgm-data =0.3.14b0, =0.22.0, =0.23.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

aporia-importer (1.0.6), cg-simulator (>=0.1.0, <=0.1.1) +14 more potentially affected by CVE-2026-23528 via distributed (2021.12.0)

distributed PYPI version 2021.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - aporia-importer 1.0.6 - cg-simulator =0.1.0, =0.1.3, =2.0.0, =0.1.6, =0.2.1, =0.1.4, =0.0.1, =0.2.0, =0.1.0, =0.1.3a0, =22.1.0b1,...

streaming-anomaly-detection (>=0.0.7, <=0.0.9) potentially affected by CVE-2026-23528 via distributed (2.21.0)

distributed PYPI version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - streaming-anomaly-detection =0.0.7, =0.0.9 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

cellmap-analyze (>=0.0.2, <=0.6.2), esi-acme (2025.6.0) +10 more potentially affected by CVE-2026-23528 via distributed (2025.5.1)

distributed PYPI version 2025.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cellmap-analyze =0.0.2, =1.4.1, =4.6.6, =2025.6.0, =4.8.3, =2.3.0, =0.2.0, =0.1.0, =1.1.23, =1.2.0 - yprov4dask 1.0.0 Source cves:...

jupyter-quant (2504.1.0), odc-algo (>=1.2.0, <=1.2.1) +2 more potentially affected by CVE-2026-23528 via distributed (2025.3.0)

distributed PYPI version 2025.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - jupyter-quant 2504.1.0 - odc-algo =1.2.0, =0.3.4, =0.5.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

dask-cuda (>=22.8.0a220803, <=22.10.0a220808), devito (>=4.7.0, <=4.7.1) +2 more potentially affected by CVE-2026-23528 via distributed (2022.7.1)

distributed PYPI version 2022.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =22.8.0a220803, =4.7.0, =0.56.0, =1.13.0, =1.14.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

celldega (>=0.24.0, <=0.27.0), esi-acme (2025.11.0) +3 more potentially affected by CVE-2026-23528 via distributed (2025.11.0)

distributed PYPI version 2025.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - celldega =0.24.0, =0.2.39, =0.2.68 - signifikante 0.2.0 - thyra 1.24.0 Source cves: CVE-2026-23528 Source advisory:...

cardea (>=0.1.2.dev0, <=0.1.2), evalml (>=0.16.1, <=0.22.0) +14 more potentially affected by CVE-2026-23528 via distributed (2024.2.1)

distributed PYPI version 2024.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cardea =0.1.2.dev0, =0.16.1, =1.0.0, =0.1.0, =0.12.0, =0.0.2, =0.32.2, =0.3.0.dev0, =0.7.0, =2.11.28, =0.3.1, =0.0.1, =0.0.4 and more...

aggfly (>=0.1.0, <=0.1.5), cellseg-gsontools (0.1.3) +26 more potentially affected by CVE-2026-23528 via distributed (2023.12.1)

distributed PYPI version 2023.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - aggfly =0.1.0, =0.1.3, =0.14.0, =0.1.0, =2.1.0, =0.3.2, =0.1.0, =0.1.0, =3.0.0, =0.5.3, =0.5.8 and more Source cves: CVE-2026-23528...

CVE-2026-23528

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

CVE-2026-23528

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

CVE-2026-23528 Dask distributed Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

CVE-2026-23528 Dask distributed Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

CVE-2026-23528 Dask distributed Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...