Описание
ydata unsafe deserialization
Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded.
Пакеты
Наименование
ydata-profiling
pip
Затронутые версииВерсия исправления
>= 3.7.0, <= 4.8.3
Отсутствует
Связанные уязвимости
CVSS3: 7.8
nvd
больше 1 года назад
Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded.