[Git][security-tracker-team/security-tracker][master] dask non issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fa9931b2 by Moritz Muehlenhoff at 2025-03-24T09:48:31+01:00
dask non issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1134,7 +1134,8 @@ CVE-2024-10110 (In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter o
 CVE-2024-10109 (A vulnerability in the mintplex-labs/anything-llm repository, as of co ...)
 	NOT-FOR-US: anything-llm
 CVE-2024-10096 (Dask versions <=2024.8.2 contain a vulnerability in the Dask Distribut ...)
-	TODO: check
+	NOTE: Not considered a valid security issue by dask upstream:
+	NOTE: https://distributed.dask.org/en/stable/limitations.html?highlight=host#security
 CVE-2024-10051 (Realchar version v0.0.4 is vulnerable to an unauthenticated denial of  ...)
 	NOT-FOR-US: Realchar
 CVE-2024-10047 (parisneo/lollms-webui versions v9.9 to the latest are vulnerable to a  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa9931b2fcfec133cda6a109a553777b63a725fb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa9931b2fcfec133cda6a109a553777b63a725fb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250324/e995c06d/attachment.htm>