Περιγραφή
A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The pull request to fix this issue awaits acceptance.
CVSS 3.1EPSS 0.28700000000000003%Κίνδυνος 0.32
Προβολή πηγής- Δημοσίευση
- 2026-06-03 02:16:17
- Επηρεαζόμενες εκδόσεις
- <=3.0
- Τύπος
- Package
- Τελευταία τροποποίηση
- 2026-07-22 19:10:00
- Διάνυσμα
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L