CVE-2024-37062: Ydataai Ydata-Profiling

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded.

Affected products

• Ydataai Ydata-Profiling: from 3.7.0; up to and including 3.7.0

Published 2024-06-04. Last modified 2026-06-17.