distributed vulnerabilities
CVEs whose affected-version data names the distributed package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-23528MediumDask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard
Dask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard
▾ Sunlitdistributed · distributedEPSS 0.24%via OSV
CVE-2021-42343Critical· 9.8Workers for local Dask clusters mistakenly listened on public interfaces
Workers for local Dask clusters mistakenly listened on public interfaces
▾ Midnightdistributed · distributedEPSS 3.0%via OSV