{"action":"Upgrade dtale to 3.14.1 or later.","affected":[{"fixed":"3.14.1","introduced":"0"}],"component":"dtale","cve_ids":["CVE-2024-8862"],"ecosystem":"PyPI","epss":0.01328,"exploited":false,"fixed_versions":["3.14.1"],"ghsa_id":"GHSA-fg5m-m723-7mv6","id":"tcs_01M5KGRWTSRCX05GT4M4JED1FZ","modified_at":"2026-07-07T17:46:40.262390561Z","published_at":"2026-07-07T14:34:41.272076Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1321","https://nvd.nist.gov/vuln/detail/CVE-2024-8862","https://github.com/man-group/dtale/commit/b6e30969390520d1400b55acbb13e5487b8472e8","https://github.com/man-group/dtale","https://rumbling-slice-eb0.notion.site/Unauthenticated-Remote-Command-Execution-via-Panda-df-query-9dc40f0477ee4b65806de7921876c222?pvs=4","https://vuldb.com/?ctiid.277499","https://vuldb.com/?id.277499","https://vuldb.com/?submit.403200","https://pypi.org/project/dtale","https://github.com/advisories/GHSA-fg5m-m723-7mv6"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1321","url":"https://osv.dev/vulnerability/PYSEC-2026-1321"}],"summary":"D-Tale Command Execution Vulnerability"}