pkg:PyPI/dtale

All known vulnerabilities

• CRITICAL9.8CVE-2024-3408Authentication bypass in dtale
  from 0, <= 3.10.0
• CRITICAL9.8CVE-2024-3408Authentication bypass in dtale
  from 0, < 32bd6fb4a63de779ff1e51823a456865ea3cbd13 | from 0
• HIGH7.5CVE-2024-21642D-Tale server-side request forgery through Web uploads
  from 0, < 3.9.0
• HIGH7.3D-Tale Command Execution Vulnerability
  from 0, < 3.14.1
• MEDIUM6.1D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder
  from 0, < 3.14.1
• MEDIUM6.1dtale vulnerable to Remote Code Execution through the Custom Filter Input
  from 0, < 3.7.0
• —D-Tale: Remote Code Execution through redis/shelf storage
  from 0, < 3.22.0
• —D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
  from 0, < 3.20.0
• —D-Tale allows Remote Code Execution through the Custom Filter Input
  from 0, < 3.16.1