Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-fpvj-m2h6-6wc5: ydata unsafe deserialization

Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata’s ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user’s system when loaded.

ghsa
#git

ydata unsafe deserialization

High severity GitHub Reviewed Published Jun 4, 2024 to the GitHub Advisory Database • Updated Jun 5, 2024

ghsa: Latest News

GHSA-3m86-c9x3-vwm9: Graylog vulnerable to privilege escalation through API tokens