Skip to content
OpenAdvisories

Package · PyPI

dtale

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-27194

    D-Tale affected by Remote Code Execution through the /save-column-filter endpoint

    D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run ma…

    man-group dtale dtale PyPI
  • High 7.3
    CVE-2024-8862

    h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserialization

    A vulnerability, which was classified as critical, has been found in h2oai h2o-3 3.46.0.4. This issue affects the function getConnectionSafe of the file /dtale/chart-data/1 of the component JDBC Connection Handler. The manipulation of the argument query leads…

    h2oai h2o-3 dtale PyPI
  • High 7.5
    CVE-2024-21642

    D-Tale server-side request forgery through Web uploads

    D-Tale is a visualizer for Pandas data structures. Users hosting versions D-Tale prior to 3.9.0 publicly can be vulnerable to server-side request forgery (SSRF), allowing attackers to access files on the server. Users should upgrade to version 3.9.0, where th…

    man-group dtale dtale PyPI