Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Security vulnerability in dask < 2021.10.0

See original GitHub issue

There is a security vulnerability in the required version of dask used by auto-sklearn.

Could you update the requirements of dask to a version >= 2021.10.0?

Issue Analytics

State:
Created 2 years ago
Comments:6 (4 by maintainers)

Top GitHub Comments

1reaction

eddiebergmancommented, Jan 11, 2022

Hi @EchoDelta,

Apologies, we sorted out the upload rights yesterday, the fixed master branch will be on PyPi within a few hours.

1reaction

eddiebergmancommented, Dec 22, 2021

Hi @EchoDelta, I’m making a hotfix for master, just going to wait until the tests pass before merging.

Top Results From Across the Web

vulnerability in dask < 2021.10.0 · Issue #122 - GitHub

An issue was discovered in Dask (aka python-dask) through 2021.09.1. Single machine Dask clusters started with dask.distributed.LocalCluster or ...

dask 2021.10.0 vulnerabilities | Snyk - Snyk Vulnerability Database

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities (in both your packages & their dependencies) and provides ...

Vulnerability Details : CVE-2021-42343

CVE-2021-42343 : An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started ...

CVE-2021-42343 Detail - NVD

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.

Dask on Twitter: "The latest release of `distributed` (2021.10.0) fixes ...

Versions of `distributed` earlier than `2021.10.0` had a potential security vulnerability relating to single-machine Dask clusters. Clusters started with `dask.