{"items":[{"id":"CVE-2024-37064","published":"2024-06-04T12:03:07.125Z","updated":"2024-08-02T03:43:50.922Z","title":"Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a maliciously crafted dataset…","severity":"HIGH","score":7.8,"vendor":"YdataAI","product":"ydata-profiling","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2024-37063","published":"2024-06-04T12:02:53.320Z","updated":"2024-08-02T03:43:50.868Z","title":"A cross-site scripting (XSS) vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a…","severity":"HIGH","score":7.8,"vendor":"YdataAI","product":"ydata-profiling","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2024-37062","published":"2024-06-04T12:02:37.865Z","updated":"2024-08-02T03:43:51.029Z","title":"Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to…","severity":"HIGH","score":7.8,"vendor":"YdataAI","product":"ydata-profiling","kev":false,"epss":0.00241,"kevAdded":null}]}