YdataAI vulnerabilities
We track 3 vulnerabilities in YdataAI products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 4, 2024.
Latest YdataAI vulnerabilities
- 7.8 High severity
ydata-profiling: Deserialization of Untrusted Data
Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a maliciously crafted dataset to run arbitrary code on an end user's system when loaded.
- 7.8 High severity
ydata-profiling: Improper Neutralization of Input During Web Page Generation
A cross-site scripting (XSS) vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser.
- 7.8 High severity
ydata-profiling: Deserialization of Untrusted Data
Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded.