CVE-2026-19897

Name of the Vulnerable Software and Affected Versions mangroup dtale versions prior to 3.22.1

Description An issue exists in the Login Endpoint component within the Login() function of the dtale/auth.py file. This flaw allows for improper restriction of excessive authentication attempts, which could be exploited remotely. The attack is characterized by high complexity and is considered difficult to execute.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the Login() function in the dtale/auth.py file to minimize the risk of exploitation.