CVE-2024-55890: D-Tale allows Remote Code Execution through the Custom Filter Input

December 13, 2024 (updated October 31, 2025)

Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server.

References

github.com/advisories/GHSA-832w-fhmw-w4f4
github.com/man-group/dtale
github.com/man-group/dtale
github.com/man-group/dtale/commit/1e26ed3ca12fe83812b90f12a2b3e5fb0b740f7a
github.com/man-group/dtale/security/advisories/GHSA-832w-fhmw-w4f4
nvd.nist.gov/vuln/detail/CVE-2024-55890

Code Behaviors & Features

Detect and mitigate CVE-2024-55890 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →