chainlit
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Chainlit contains a session hijacking vulnerability | chainlit | PyPI | Critical | Fix reported | |
| Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution | chainlit | PyPI | Critical | Fix reported | |
| Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access | chainlit | PyPI | High | Fix reported | |
| Chainlit contain a server-side request forgery (SSRF) vulnerability | chainlit | PyPI | High | Fix reported | |
| Chainlit contains an authorization bypass vulnerability | chainlit | PyPI | Low | Fix reported | |
| PYSEC-2026-598 | chainlit | PyPI | Medium | Fix reported |