Skip to content

Product

debian/dask vulnerabilities

2 published CVES affecting debian/dask, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0

Latest debian/dask CVEs

Newest publication first

  1. CVE-2026-95897 Dask Loader core.py from_npy_stack deserialization

    Published
    MediumCVSS 5.1 EPSS 0.19%

    A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py of the component Loader. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed publ...

  2. CVE-2026-10705 dask HLL hyperloglog.py nunique_approx resource consumption

    Published
    LowCVSS 2.3 EPSS 0.29%

    A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree o...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.