CVE-2021-42343

The CVE-2021-42343 entry describes a vulnerability in the Dask distributed package prior to 2021.10.0 for Python. When using a single-machine Dask cluster created via dask.distributed.LocalCluster or dask.distributed.Client, workers could be configured to listen on external interfaces instead of ...

CVE-2026-23528

CVE-2026-23528 affects Dask distributed versions prior to 2026.1.0 when used with Jupyter Lab and jupyter-server-proxy. A cross-site scripting (XSS) vulnerability in the Dask dashboard can be triggered by a crafted URL, causing code execution in the default Jupyter Python kernel via the Jupyter L...