Headline
GHSA-fpvj-m2h6-6wc5: ydata unsafe deserialization
Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata’s ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user’s system when loaded.
ydata unsafe deserialization
High severity GitHub Reviewed Published Jun 4, 2024 to the GitHub Advisory Database • Updated Jun 5, 2024