{"action":"Upgrade dtale to 3.14.1 or later.","affected":[{"fixed":"3.14.1","introduced":"0"}],"component":"dtale","cve_ids":["CVE-2024-8862"],"ecosystem":"PyPI","epss":0.01328,"exploited":false,"fixed_versions":["3.14.1"],"ghsa_id":"GHSA-fg5m-m723-7mv6","id":"tcs_01M5KFF8C3A99WDVE3BH9Y9XZZ","modified_at":"2026-09-10T03:50:18.904509027Z","published_at":"2024-09-16T14:37:27Z","references":["https://osv.dev/vulnerability/GHSA-fg5m-m723-7mv6","https://nvd.nist.gov/vuln/detail/CVE-2024-8862","https://github.com/man-group/dtale/commit/b6e30969390520d1400b55acbb13e5487b8472e8","https://github.com/man-group/dtale","https://rumbling-slice-eb0.notion.site/Unauthenticated-Remote-Command-Execution-via-Panda-df-query-9dc40f0477ee4b65806de7921876c222?pvs=4","https://vuldb.com/?ctiid.277499","https://vuldb.com/?id.277499","https://vuldb.com/?submit.403200"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-fg5m-m723-7mv6","url":"https://osv.dev/vulnerability/GHSA-fg5m-m723-7mv6"}],"summary":"D-Tale Command Execution Vulnerability"}