Executive brief
Duplicate Advisory: D-Tale Command Injection vulnerability
Affected products
- PyPI dtale
Junglewise Threat Intelligence
CVE-2025-0655: Duplicate Advisory: D-Tale Command Injection vulnerability
CVE-2025-0655 · Severity: low · CVSS 3 · Published 2025-03-20
Technologies: dtale (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2460 - D-Tale: Remote Code Execution through redis/shelf storage
- PYSEC-2026-2461 - D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
- PYSEC-2026-1320 - D-Tale allows Remote Code Execution through the Custom Filter Input
- PYSEC-2026-1321 - D-Tale Command Execution Vulnerability
- PYSEC-2026-1323 - D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder