What is GHSA-c87c-78rc-vmv2?

GHSA-c87c-78rc-vmv2 is a security advisory published by GitHub Security Advisories with High severity. D-Tale affected by Remote Code Execution through the /save-column-filter endpoint

Which CVE IDs does GHSA-c87c-78rc-vmv2 cover?

GHSA-c87c-78rc-vmv2 covers the following CVE IDs: CVE-2026-27194. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-c87c-78rc-vmv2?

GHSA-c87c-78rc-vmv2 affects 1 product, including: pip/dtale:\u003c 3.20.0.

GHSA-c87c-78rc-vmv2High

D-Tale affected by Remote Code Execution through the /save-column-filter endpoint

Vendor

GitHub Security Advisories

Published

February 19, 2026

Last Modified

February 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-27194 →

📋 Description

Impact

Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server.

Patches

Users should upgrade to version 3.20.0.

Workarounds

There are no workarounds for versions < 3.20.0

🎯 Affected products1

pip/dtale:< 3.20.0

🔗 References (4)

https://github.com/man-group/dtale/security/advisories/GHSA-c87c-78rc-vmv2
https://github.com/man-group/dtale/commit/431c6148d3c799de20e1dec86c4432f48e3d0746
https://nvd.nist.gov/vuln/detail/CVE-2026-27194
https://github.com/advisories/GHSA-c87c-78rc-vmv2