XSS in Man-group Dtale

CVE-2026-35052

D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures. Prior to 3.22.0, users hosting D-Tale publicly while using a redis or shelf storage layer could be vulnerable to remote code exec…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.001 (31.2th percentile) — read the EPSS interpretation.