CVE-2024-21485
8 advisories.
npm/dash-core-components CVE-2024-21485: medium 6.5
Dash apps vulnerable to Cross-site Scripting
Action: Upgrade dash-core-components to 2.13.0 or later.
npm i dash-core-components@2.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.13.0 | - |
Fixed versions
| 2.13.0 |
Sources
- osv: GHSA-547x-748v-vp6p
- https://nvd.nist.gov/vuln/detail/CVE-2024-21485
- https://github.com/plotly/dash/issues/2729
- https://github.com/plotly/dash/pull/2732
- https://github.com/plotly/dash/commit/9920073c9a8619ae8f90fcec1924f2f3a4332a8c
- https://github.com/advisories/GHSA-547x-748v-vp6p
- https://github.com/plotly/dash
- https://github.com/plotly/dash/releases/tag/v2.15.0
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-core-components/PYSEC-2026-219.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-html-components/PYSEC-2026-220.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash/PYSEC-2024-35.yaml
- https://security.snyk.io/vuln/SNYK-JS-DASHCORECOMPONENTS-6183084
- https://security.snyk.io/vuln/SNYK-JS-DASHHTMLCOMPONENTS-6226337
- https://security.snyk.io/vuln/SNYK-PYTHON-DASH-6226335
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHCORECOMPONENTS-6226334
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHHTMLCOMPONENTS-6226336
CVE-2024-21485 · published · modified · JSON
PyPI/dash-html-components CVE-2024-21485: medium 6.5
Dash apps vulnerable to Cross-site Scripting
Action: Upgrade dash-html-components to 2.0.0 or later.
pip install dash-html-components==2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: GHSA-547x-748v-vp6p#PyPI/dash-html-components
- https://nvd.nist.gov/vuln/detail/CVE-2024-21485
- https://github.com/plotly/dash/issues/2729
- https://github.com/plotly/dash/pull/2732
- https://github.com/plotly/dash/commit/9920073c9a8619ae8f90fcec1924f2f3a4332a8c
- https://github.com/advisories/GHSA-547x-748v-vp6p
- https://github.com/plotly/dash
- https://github.com/plotly/dash/releases/tag/v2.15.0
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-core-components/PYSEC-2026-219.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-html-components/PYSEC-2026-220.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash/PYSEC-2024-35.yaml
- https://security.snyk.io/vuln/SNYK-JS-DASHCORECOMPONENTS-6183084
- https://security.snyk.io/vuln/SNYK-JS-DASHHTMLCOMPONENTS-6226337
- https://security.snyk.io/vuln/SNYK-PYTHON-DASH-6226335
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHCORECOMPONENTS-6226334
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHHTMLCOMPONENTS-6226336
CVE-2024-21485 · published · modified · JSON
PyPI/dash-core-components CVE-2024-21485: medium 6.5
Dash apps vulnerable to Cross-site Scripting
Action: Upgrade dash-core-components to 2.0.0 or later.
pip install dash-core-components==2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: GHSA-547x-748v-vp6p#PyPI/dash-core-components
- https://nvd.nist.gov/vuln/detail/CVE-2024-21485
- https://github.com/plotly/dash/issues/2729
- https://github.com/plotly/dash/pull/2732
- https://github.com/plotly/dash/commit/9920073c9a8619ae8f90fcec1924f2f3a4332a8c
- https://github.com/advisories/GHSA-547x-748v-vp6p
- https://github.com/plotly/dash
- https://github.com/plotly/dash/releases/tag/v2.15.0
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-core-components/PYSEC-2026-219.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-html-components/PYSEC-2026-220.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash/PYSEC-2024-35.yaml
- https://security.snyk.io/vuln/SNYK-JS-DASHCORECOMPONENTS-6183084
- https://security.snyk.io/vuln/SNYK-JS-DASHHTMLCOMPONENTS-6226337
- https://security.snyk.io/vuln/SNYK-PYTHON-DASH-6226335
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHCORECOMPONENTS-6226334
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHHTMLCOMPONENTS-6226336
CVE-2024-21485 · published · modified · JSON
PyPI/dash CVE-2024-21485: medium 6.5
Dash apps vulnerable to Cross-site Scripting
Action: Upgrade dash to 2.15.0 or later.
pip install dash==2.15.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.15.0 | - |
Fixed versions
| 2.15.0 |
Sources
- osv: GHSA-547x-748v-vp6p#PyPI/dash
- https://nvd.nist.gov/vuln/detail/CVE-2024-21485
- https://github.com/plotly/dash/issues/2729
- https://github.com/plotly/dash/pull/2732
- https://github.com/plotly/dash/commit/9920073c9a8619ae8f90fcec1924f2f3a4332a8c
- https://github.com/advisories/GHSA-547x-748v-vp6p
- https://github.com/plotly/dash
- https://github.com/plotly/dash/releases/tag/v2.15.0
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-core-components/PYSEC-2026-219.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-html-components/PYSEC-2026-220.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash/PYSEC-2024-35.yaml
- https://security.snyk.io/vuln/SNYK-JS-DASHCORECOMPONENTS-6183084
- https://security.snyk.io/vuln/SNYK-JS-DASHHTMLCOMPONENTS-6226337
- https://security.snyk.io/vuln/SNYK-PYTHON-DASH-6226335
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHCORECOMPONENTS-6226334
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHHTMLCOMPONENTS-6226336
CVE-2024-21485 · published · modified · JSON
npm/dash-html-components CVE-2024-21485: medium 6.5
Dash apps vulnerable to Cross-site Scripting
Action: Upgrade dash-html-components to 2.0.16 or later.
npm i dash-html-components@2.0.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.16 | - |
Fixed versions
| 2.0.16 |
Sources
- osv: GHSA-547x-748v-vp6p#npm/dash-html-components
- https://nvd.nist.gov/vuln/detail/CVE-2024-21485
- https://github.com/plotly/dash/issues/2729
- https://github.com/plotly/dash/pull/2732
- https://github.com/plotly/dash/commit/9920073c9a8619ae8f90fcec1924f2f3a4332a8c
- https://github.com/advisories/GHSA-547x-748v-vp6p
- https://github.com/plotly/dash
- https://github.com/plotly/dash/releases/tag/v2.15.0
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-core-components/PYSEC-2026-219.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash-html-components/PYSEC-2026-220.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/dash/PYSEC-2024-35.yaml
- https://security.snyk.io/vuln/SNYK-JS-DASHCORECOMPONENTS-6183084
- https://security.snyk.io/vuln/SNYK-JS-DASHHTMLCOMPONENTS-6226337
- https://security.snyk.io/vuln/SNYK-PYTHON-DASH-6226335
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHCORECOMPONENTS-6226334
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHHTMLCOMPONENTS-6226336
CVE-2024-21485 · published · modified · JSON
PyPI/dash CVE-2024-21485: medium 5.4
Versions of the package dash-core-components before 2.13.0; all versions of the package dash-core-components; versions of the package dash before 2.15.0; all versions of the package dash-html-componen
Action: Upgrade dash to 2.13.0 or later.
pip install dash==2.13.0pip install dash==2.15.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.13.0 | - |
| 2.14.0 | 2.15.0 | - |
Fixed versions
| 2.13.0 | 2.15.0 |
Sources
- osv: PYSEC-2024-35
- https://security.snyk.io/vuln/SNYK-JS-DASHCORECOMPONENTS-6183084
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHCORECOMPONENTS-6226334
- https://security.snyk.io/vuln/SNYK-PYTHON-DASH-6226335
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHHTMLCOMPONENTS-6226336
- https://security.snyk.io/vuln/SNYK-JS-DASHHTMLCOMPONENTS-6226337
- https://github.com/plotly/dash/issues/2729
- https://github.com/plotly/dash/pull/2732
- https://github.com/plotly/dash/releases/tag/v2.15.0
- https://github.com/plotly/dash/commit/9920073c9a8619ae8f90fcec1924f2f3a4332a8c
- https://github.com/advisories/GHSA-547x-748v-vp6p
CVE-2024-21485 · published · modified · JSON
PyPI/dash-core-components CVE-2024-21485: medium 5.4
Versions of the package dash-core-components before 2.13.0; all versions of the package dash-core-components; versions of the package dash before 2.15.0; all versions of the package dash-html-componen
Action: Upgrade dash-core-components to 2.0.0 or later.
pip install dash-core-components==2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: PYSEC-2026-219
- https://security.snyk.io/vuln/SNYK-JS-DASHCORECOMPONENTS-6183084
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHCORECOMPONENTS-6226334
- https://security.snyk.io/vuln/SNYK-PYTHON-DASH-6226335
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHHTMLCOMPONENTS-6226336
- https://security.snyk.io/vuln/SNYK-JS-DASHHTMLCOMPONENTS-6226337
- https://github.com/plotly/dash/issues/2729
- https://github.com/plotly/dash/pull/2732
- https://github.com/plotly/dash/releases/tag/v2.15.0
- https://github.com/plotly/dash/commit/9920073c9a8619ae8f90fcec1924f2f3a4332a8c
- https://github.com/advisories/GHSA-547x-748v-vp6p
CVE-2024-21485 · published · modified · JSON
PyPI/dash-html-components CVE-2024-21485: medium 5.4
Versions of the package dash-core-components before 2.13.0; all versions of the package dash-core-components; versions of the package dash before 2.15.0; all versions of the package dash-html-componen
Action: Upgrade dash-html-components to 2.0.0 or later.
pip install dash-html-components==2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: PYSEC-2026-220
- https://security.snyk.io/vuln/SNYK-JS-DASHCORECOMPONENTS-6183084
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHCORECOMPONENTS-6226334
- https://security.snyk.io/vuln/SNYK-PYTHON-DASH-6226335
- https://security.snyk.io/vuln/SNYK-PYTHON-DASHHTMLCOMPONENTS-6226336
- https://security.snyk.io/vuln/SNYK-JS-DASHHTMLCOMPONENTS-6226337
- https://github.com/plotly/dash/issues/2729
- https://github.com/plotly/dash/pull/2732
- https://github.com/plotly/dash/releases/tag/v2.15.0
- https://github.com/plotly/dash/commit/9920073c9a8619ae8f90fcec1924f2f3a4332a8c
- https://github.com/advisories/GHSA-547x-748v-vp6p
CVE-2024-21485 · published · modified · JSON