Description
Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.
Recommendation
Update the dash-html-components package to the latest compatible version. Followings are version details:
- Affected version(s): < 2.0.16
- Patched version(s): 2.0.16
References
Could your website be exposed too?
SmartScanner can check your website for Dash apps vulnerable to Cross-site Scripting and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Dash apps vulnerable to Cross-site Scripting - dash-core-components - CVE-2024-21485
- Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting - CVE-2024-9148
- Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section - CVE-2024-47819
- Summernote vulnerable to cross-site scripting - CVE-2024-29504
You might also like:
See something that needs correcting? Let us knowUpdated July 20, 2026