PyPI/dtale CVE-2024-21642: high 7.5, EPSS 0.71%
D-Tale server-side request forgery through Web uploads
Action: Upgrade dtale to 3.9.0 or later.
pip install dtale==3.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.9.0 | - |
Fixed versions
| 3.9.0 |
Sources
- osv: GHSA-7hfx-h3j3-rwq4
- https://github.com/man-group/dtale/security/advisories/GHSA-7hfx-h3j3-rwq4
- https://nvd.nist.gov/vuln/detail/CVE-2024-21642
- https://github.com/man-group/dtale/commit/954f6be1a06ff8629ead2c85c6e3f8e2196b3df2
- https://github.com/man-group/dtale
- https://github.com/man-group/dtale?tab=readme-ov-file#load-data--sample-datasets
CVE-2024-21642 · published · modified · JSON