Launch Week Day 1: Announcing Security Design Review
UNKNOWN PyPI

D-Tale affected by Remote Code Execution through the /save-column-filter endpoint

GHSA-c87c-78rc-vmv2 · CVE-2026-27194

Published · Modified

Description

Impact

Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server.

Patches

Users should upgrade to version 3.20.0.

Workarounds

There are no workarounds for versions < 3.20.0

Ready to move

Start Securing

Free, no credit card | First findings in minutes