Headline
GHSA-cg49-hrj4-3rpr: ydata unsafe deserialization
Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata’s ydata-profiling open-source library, enabling a maliciously crafted dataset to run arbitrary code on an end user’s system when loaded.
ydata unsafe deserialization
High severity GitHub Reviewed Published Jun 4, 2024 to the GitHub Advisory Database • Updated Jun 5, 2024