7 matches found
Insufficient Entropy
Overview dtale is a Web Client for Visualizing Pandas Objects Affected versions of this package are vulnerable to Insufficient Entropy due to the buildsecretkey function in dtale/app.py generating insufficiently random values for session cookies. An attacker can predict session cookie values by...
EUVD-2026-59768
A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...
CVE-2026-19896 mangroup dtale Flask Session Cookie app.py build_secret_key random values
A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...
CVE-2026-19896 mangroup dtale Flask Session Cookie app.py build_secret_key random values
A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...
CVE-2026-19896
CVE-2026-19896 affects mangroup dtale up to version 3.22.0, targeting the build_secret_key function in dtale/app.py (Flask Session Cookie). The issue causes insufficiently random values, enabling remote exploitation with high attack complexity and published exploits. A fix is pending approval via...
CVE-2026-19896 mangroup dtale Flask Session Cookie app.py build_secret_key random values
A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...
CVE-2026-19896: Use of Insufficiently Random Values
A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...