Security Advisory

CVE-2026-35052

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-06 17:32:28
Last updated 2026-04-07 15:59:35
Assigner GitHub_M
State PUBLISHED

Description

D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures. Prior to 3.22.0, users hosting D-Tale publicly while using a redis or shelf storage layer could be vulnerable to remote code execution allowing attackers to run malicious code on the server. This vulnerability is fixed in 3.22.0.