D-Tale affected by Remote Code Execution through the /save-column-filter endpoint

概要

参考情報

• man-group/dtale security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-27194 · ADVISORY
• man-group/dtale commit 431c614 · WEB
• man-group/dtale · PACKAGE
• pypi.org/project/dtale · PACKAGE
• GitHub Advisory GHSA-c87c-78rc-vmv2 · ADVISORY

dtale のその他の脆弱性

• CVE-2026-35052緊急 9.8D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures. Prior to 3.22.0, users hosting…
• CVE-2024-55890中 6.9D-Tale is a visualizer for pandas data structures. Prior to version 3.16.1, users hosting D-Tale publicly can be vulnerable to remote code e…
• CVE-2024-8862緊急 9.8A vulnerability, which was classified as critical, has been found in h2oai h2o-3 3.46.0.4. This issue affects the function getConnectionSafe…
• CVE-2024-45595緊急 9.8D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attacke…
• CVE-2024-3408緊急 9.8man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code execution (RCE) due to improper input validation. T…