CVE-2024-37062
EUVD-2024-204104.06.2024, 12:15
Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| ydataai | ydata-profiling | 𝑥 ≤ 3.7.0 | ADP |
Common Weakness Enumeration