django-plotly-dash (1.3.1) potentially affected by CVE-2024-21485 via dash-core-components (1.9.0)

dash-core-components PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - django-plotly-dash 1.3.1 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

📄 Dash-Uploader 0.7.0a2 Path Traversal

There is an unauthenticated path traversal in dash-uploader versions 0.1.0 through 0.7.0a2 allowing arbitrary file write, leading to but not limited to remote code execution, application source code overwrite, stored cross site scripting, and persistent backdoor installation. CVE-2026-38360: Path...

django-plotly-dash (1.3.1) potentially affected by CVE-2024-21485 via dash-core-components (1.9.0)

dash-core-components PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - django-plotly-dash 1.3.1 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

django-plotly-dash (>=1.6.6, <=1.7.2), june (>=1.1.0, <=1.1.2) +2 more potentially affected by CVE-2024-21485 via dash (1.20.0)

dash PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash and may be impacted: - django-plotly-dash =1.6.6, =1.1.0, =1.0.0.dev9, =0.2.6, =0.8.2 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

Dash Cross-Site Scripting Vulnerability

plotly Dash is a data application and dashboard for Python by plotly. Dash suffers from a cross-site scripting vulnerability. An attacker exploiting this vulnerability could steal data...