airi-test-task (0.1.0), dtaledesktop (>=0.0.1, <=0.1.3) +13 more potentially affected by CVE-2026-19896 via dtale (>=2.2.0, <=3.22.0)

dtale PYPI version =2.2.0, =0.0.1, =0.1.0, =0.0.0.35, =0.1.1, =0.0.14, =0.0.5, =0.0.10, =1.0.0, =0.3.3, =0.1.0, =0.1.5 Source cves: CVE-2026-19896 Source advisory: SNYK:PYTHON-DTALE-18912865...

CVE-2026-19896

creationtimestamp| type| source ---|---|--- 2026-08-15 16:55:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bk2achsvzt7er...

CVE-2026-19896 mangroup dtale Flask Session Cookie app.py build_secret_key random values

A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...