Approved changes feed: RSS · Atom
cpe:2.3:a:dask:dask:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Dask (ed4da367-5496-51c2-b74d-ba7304727640) |
|---|---|
| Product | Dask (921eb3d2-8d4d-52df-b551-b34c8012005f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-95897 |
vulnerable | 2026-10-13 12:28:40.509810 |
Dask Loader core.py from_npy_stack deserialization
MEDIUM (5.5)
A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py of the component Loader. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-23T00:30:14.623Z
Updated: 2026-09-23T15:01:52.551Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10705 |
vulnerable | 2026-06-08 07:47:13.850622 |
dask HLL hyperloglog.py nunique_approx resource consumption
LOW (3.1)
A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The pull request to fix this issue awaits acceptance.
Published: 2026-06-03T01:15:10.343Z
Updated: 2026-06-03T14:11:44.133Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.