Executive brief
dtale vulnerable to Remote Code Execution through the Custom Filter Input
Affected products
- PyPI dtale
Junglewise Threat Intelligence
CVE-2023-46134: PYSEC-2026-1322 - dtale vulnerable to Remote Code Execution through the Custom Filter Input
CVE-2023-46134 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: dtale (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2460 - D-Tale: Remote Code Execution through redis/shelf storage
- PYSEC-2026-2461 - D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
- PYSEC-2026-1320 - D-Tale allows Remote Code Execution through the Custom Filter Input
- PYSEC-2026-1321 - D-Tale Command Execution Vulnerability
- PYSEC-2026-1323 - D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder