1.10.0

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-02	CVE-2024-21485	Cross-site Scripting vulnerability in Plotly Dash Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site Scripting (XSS) when the href of the a tag is controlled by an adversary. network low complexity plotly CWE-79	5.4