VULNERABILITY INTELLIGENCE
CVE-2024-45595
CVSS score6.1 MEDIUM
EPSS probability0.78%
CISA KEVNot currently listed
Published2024-09-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default.
Weakness classification
- security-advisories@github.com: CWE-79
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- security-advisories@github.com — Product
- security-advisories@github.com — Patch
- security-advisories@github.com — Vendor Advisory