PyPI/dtale CVE-2024-45595: medium 6.1, EPSS 0.78%

D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder

Action: Upgrade dtale to 3.14.1 or later.

pip install dtale==3.14.1

Affected

Fixed versions

Sources

• osv: GHSA-pw44-4h99-wqff
• https://github.com/man-group/dtale/security/advisories/GHSA-pw44-4h99-wqff
• https://nvd.nist.gov/vuln/detail/CVE-2024-45595
• https://github.com/man-group/dtale/commit/b6e30969390520d1400b55acbb13e5487b8472e8
• https://github.com/man-group/dtale
• https://github.com/man-group/dtale#custom-filter

CVE-2024-45595 · published 2024-09-10T19:42:56Z · modified 2026-09-10T03:50:18.295937272Z · JSON