Skip to content
OpenAdvisories

Package · Debian

dask.distributed

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2026-23528

    Dask distributed Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard

    Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-s…

    dask distributed dask.distributed distributed Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2021-42343

    Workers for local Dask clusters mistakenly listened on public interfaces

    An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client (which defaults to using LocalCluster) would mistakenly configure their res…

    dask.distributed dask.distributed distributed dask Debian Ubuntu Alpine PyPI