{"action":"Upgrade distributed to 2021.10.0 or later.","affected":[{"fixed":"2021.10.0","introduced":"0"}],"component":"distributed","cve_ids":["CVE-2021-42343"],"ecosystem":"PyPI","epss":0.02982,"exploited":false,"fixed_versions":["2021.10.0"],"ghsa_id":"GHSA-hwqr-f3v9-hwxr","id":"tcs_01M5KGFRAFA6SXB1B1Z3PXSW2N","modified_at":"2026-07-09T16:56:37.896815557Z","published_at":"2021-10-26T11:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-871","https://docs.dask.org/en/latest/changelog.html","https://github.com/dask/dask/tags","https://github.com/dask/distributed/security/advisories/GHSA-hwqr-f3v9-hwxr","https://github.com/advisories/GHSA-j8fq-86c5-5v2r","https://github.com/advisories/GHSA-hwqr-f3v9-hwxr"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-871","url":"https://osv.dev/vulnerability/PYSEC-2021-871"}],"summary":"An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client (which defaults"}