SUSE CVE-2024-21485

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

buzzword (>=1.2.1 <=1.2.3), dash-tokamak (=1.6.0) +15 more potentially affected by CVE-2024-21485 via dash-html-components (>=1.0.0 <=1.1.4)

dash-html-components PYPI version =1.0.0, =1.2.1, =0.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.2.9.2, =0.70.0, =0.5.0, =0.10.0, =0.12.1 and more Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

buzzword (>=1.2.1 <=1.2.3), dash-tokamak (=1.6.0) +22 more potentially affected by CVE-2024-21485 via dash-core-components (>=0.22.1 <=1.9.1)

dash-core-components PYPI version =0.22.1, =1.2.1, =0.1.0, =2.0.0b0, =0.1.0, =0.1.0, =0.2.0, =1.0.0, =0.0.2, =0.1.13 and more Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

GHSA-547X-748V-VP6P Dash apps vulnerable to Cross-site Scripting

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

arbitragelab (=0.9.1), buzzword (>=1.2.1 <=1.2.3) +104 more potentially affected by CVE-2024-21485 via dash (>=0.21.1 <=2.14.2)

dash PYPI version =0.21.1, =1.2.1, =0.0.1, =2020.5.21, =0.0.2, =0.0.2, =0.1.0, =0.0.8, =0.1.3, =0.13.2, =3.0.0, =3.0.4 and more Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

Dash apps vulnerable to Cross-site Scripting

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

CVE-2024-21485

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

covigator (=2.2.3), dataflowutil (>=0.0.8 <=0.0.11) +12 more potentially affected by CVE-2024-21485 via dash (>=2.14.0 <=2.14.2)

dash PYPI version =2.14.0, =0.0.8, =0.2.0, =1.1.0, =2.0.0.post1, =1.1.1, =0.0.1, =1.8.250320.1190603, =0.1.0, =0.7.0 - vpplib =0.0.4 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2024-35...

Cross site scripting

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

PYSEC-2024-35

Versions of the package dash-core-components before 2.13.0; all versions of the package dash-core-components; versions of the package dash before 2.15.0; all versions of the package dash-html-components; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site...

arbitragelab (=0.9.1), buzzword (>=1.2.1 <=1.2.3) +92 more potentially affected by CVE-2024-21485 via dash (>=0.21.1 <=2.12.1)

dash PYPI version =0.21.1, =1.2.1, =0.0.1, =2020.5.21, =0.0.2, =0.0.2, =0.1.0, =0.1.3, =0.13.2, =3.0.0, =1.2.1, =0.0.107, =0.0.109 and more Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2024-35...

CVE-2024-21485

Dash Framework (Dash, dash-core-components, dash-html-components) versions before 2.15.0 (core components before 2.13.0/2.0.0; html components before 2.0.0/2.0.16) are vulnerable to Cross-site Scripting (XSS) when the href attribute of an anchor tag is controlled by an attacker. The vulnerability...

CVE-2024-21485

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

CVE-2024-21485

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

CVE-2024-21485

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

CVE-2024-21485

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

Dash Cross-Site Scripting Vulnerability

plotly Dash is a data application and dashboard for Python by plotly. Dash suffers from a cross-site scripting vulnerability. An attacker exploiting this vulnerability could steal data...

arbitragelab (=0.9.1), covigator (=2.2.3) +42 more potentially affected by CVE-2024-21485 via dash (>=2.0.0 <=2.14.2)

dash PYPI version =2.0.0, =0.0.8, =0.13.2, =1.2.1, =0.0.107, =0.5.3, =0.2.0, =1.0.0, =0.1.0, =0.7.3, =0.8.4 and more Source cves: CVE-2024-21485 Source advisory: SNYK:PYTHON-DASH-6226335...

Cross-site Scripting (XSS)

Overview dash-html-components is a Vanilla HTML components for Dash. Affected versions of this package are vulnerable to Cross-site Scripting XSS when the href of the a tag is controlled by an adversary. An authenticated attacker who stores a view that exploits this vulnerability could steal the...

Cross-site Scripting (XSS)

Overview dash-core-components is a library that provides the core React component suite for Dash. Affected versions of this package are vulnerable to Cross-site Scripting XSS when the href of the a tag is controlled by an adversary. An authenticated attacker who stores a view that exploits this...