Skip to content
OpenAdvisories

Vendor

man-group

9 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.1

    D-Tale affected by Remote Code Execution through the /save-column-filter endpoint

    D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run ma…

  • High 7.5

    D-Tale server-side request forgery through Web uploads

    D-Tale is a visualizer for Pandas data structures. Users hosting versions D-Tale prior to 3.9.0 publicly can be vulnerable to server-side request forgery (SSRF), allowing attackers to access files on the server. Users should upgrade to version 3.9.0, where th…