CVE-2026-10705 – dask HLL hyperloglog.py nunique_approx resource consumption

CVE ID :CVE-2026-10705

Published : June 3, 2026, 2:16 a.m. | 16 minutes ago

Description :A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The pull request to fix this issue awaits acceptance.

Severity: 3.1 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…