{"action":"Upgrade distributed to 2021.10.0 or later.","affected":[{"fixed":"2021.10.0","introduced":"0"}],"component":"distributed","cve_ids":["CVE-2021-42343"],"ecosystem":"PyPI","epss":0.02982,"exploited":false,"fixed_versions":["2021.10.0"],"ghsa_id":"GHSA-hwqr-f3v9-hwxr","id":"tcs_01M5KFMJWCBE4CD4WSSF4X8JRY","modified_at":"2026-07-09T16:56:37.896815557Z","published_at":"2022-07-15T21:56:08Z","references":["https://osv.dev/vulnerability/GHSA-hwqr-f3v9-hwxr","https://github.com/dask/distributed/security/advisories/GHSA-hwqr-f3v9-hwxr","https://nvd.nist.gov/vuln/detail/CVE-2021-42343","https://github.com/dask/distributed/pull/5427","https://github.com/dask/distributed/commit/afce4be8e05fb180e50a9d9e38465f1a82295e1b","https://docs.dask.org/en/latest/changelog.html","https://github.com/dask/dask/tags","https://github.com/dask/distributed","https://github.com/pypa/advisory-database/tree/main/vulns/distributed/PYSEC-2021-871.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/distributed/PYSEC-2021-872.yaml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hwqr-f3v9-hwxr","url":"https://osv.dev/vulnerability/GHSA-hwqr-f3v9-hwxr"}],"summary":"Workers for local Dask clusters mistakenly listened on public interfaces"}