43 matches found
PYSEC-2026-2062 ydata unsafe deserialization
Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded...
PYSEC-2026-2060 ydata cross-site scripting
A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...
bluemist (>=0.1.2, <=0.1.3), breast-substype-analysis (1.0.1) +11 more potentially affected by CVE-2024-37063 via ydata-profiling (>=4.0.0, <=4.7.0)
ydata-profiling PYPI version =4.0.0, =0.1.2, =1.0.0, =4.2.0, =1.16.0, =0.0.4, =0.1.90, =16.0.26, =16.0.27, =0.1.9, =0.1.13 Source cves: CVE-2024-37063 Source advisory: OSV:PYSEC-2026-2060...
bluemist (>=0.1.2, <=0.1.3), breast-substype-analysis (1.0.1) +11 more potentially affected by CVE-2024-37062 via ydata-profiling (>=4.0.0, <=4.7.0)
ydata-profiling PYPI version =4.0.0, =0.1.2, =1.0.0, =4.2.0, =1.16.0, =0.0.4, =0.1.90, =16.0.26, =16.0.27, =0.1.9, =0.1.13 Source cves: CVE-2024-37062 Source advisory: OSV:PYSEC-2026-2062...
ydata unsafe deserialization
Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded...
ydata unsafe deserialization
Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a maliciously crafted dataset to run arbitrary code on an end user's system when loaded...
bluemist (>=0.1.2, <=0.1.3), breast-substype-analysis (1.0.1) +11 more potentially affected by CVE-2024-37064 via ydata-profiling (>=4.0.0, <=4.7.0)
ydata-profiling PYPI version =4.0.0, =0.1.2, =1.0.0, =4.2.0, =1.16.0, =0.0.4, =0.1.90, =16.0.26, =16.0.27, =0.1.9, =0.1.13 Source cves: CVE-2024-37064 Source advisory: OSV:PYSEC-2026-2061...
PYSEC-2026-2061 ydata unsafe deserialization
Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a maliciously crafted dataset to run arbitrary code on an end user's system when loaded...
ydata cross-site scripting
A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...
EUVD-2024-2041
Malicious code in bioql PyPI...
EUVD-2024-1888
Malicious code in bioql PyPI...
EUVD-2024-2020
Malicious code in bioql PyPI...
CVE-2024-37063
A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...
GHSA-2R57-2MRH-GGJV ydata cross-site scripting
A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...
ydata unsafe deserialization
Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded...
ydata unsafe deserialization
Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a maliciously crafted dataset to run arbitrary code on an end user's system when loaded...
bluemist (>=0.1.2, <=0.1.3), breast-substype-analysis (1.0.1) +11 more potentially affected by CVE-2024-37063 via ydata-profiling (>=4.0.0, <=4.7.0)
ydata-profiling PYPI version =4.0.0, =0.1.2, =1.0.0, =4.2.0, =1.16.0, =0.0.4, =0.1.90, =16.0.26, =16.0.27, =0.1.9, =0.1.13 Source cves: CVE-2024-37063 Source advisory: OSV:GHSA-2R57-2MRH-GGJV...
bluemist (>=0.1.2, <=0.1.3), breast-substype-analysis (1.0.1) +11 more potentially affected by CVE-2024-37062 via ydata-profiling (>=4.0.0, <=4.7.0)
ydata-profiling PYPI version =4.0.0, =0.1.2, =1.0.0, =4.2.0, =1.16.0, =0.0.4, =0.1.90, =16.0.26, =16.0.27, =0.1.9, =0.1.13 Source cves: CVE-2024-37062 Source advisory: GHSA-FPVJ-M2H6-6WC5...
ydata cross-site scripting
A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...
GHSA-FPVJ-M2H6-6WC5 ydata unsafe deserialization
Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded...