Skip to content
OpenAdvisories

Package · PyPI

ydata-profiling

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.8
    CVE-2024-37064

    ydata unsafe deserialization

    Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a maliciously crafted dataset to run arbitrary code on an end user's system when loaded.

    YdataAI ydata-profiling ydata-profiling PyPI
  • High 7.8
    CVE-2024-37063

    ydata cross-site scripting

    A cross-site scripting (XSS) vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser.

    YdataAI ydata-profiling ydata-profiling PyPI
  • High 7.8
    CVE-2024-37062

    ydata unsafe deserialization

    Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded.

    YdataAI ydata-profiling ydata-profiling PyPI