We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-35052

CVE-2026-35052

React

Severity: —
CVSS: —CVSS
Published: 2026-04-06
Last modified: 2026-04-06
CWE: CWE-79

Description

D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures. Prior to 3.22.0, users hosting D-Tale publicly while using a redis or shelf storage layer could be vulnerable to remote code execution allowing attackers to run malicious code on the server. This vulnerability is fixed in 3.22.0.

References

https://github.com/man-group/dtale/security/advisories/GHSA-436g-fhfc-9g5w

Summary

Description

References