CVE-2024-45595

Name of the Vulnerable Software and Affected Versions: D-Tale versions prior to 3.14.1

Description: D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution, allowing attackers to run malicious code on the server. The issue is related to the Custom Filter input.

Recommendations: For versions prior to 3.14.1, upgrade to version 3.14.1 where the Custom Filter input is turned off by default. As a temporary workaround for versions earlier than 3.14.1, consider hosting D-Tale only to trusted users.