All products

streamlit

PyPI · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omissionCVE-2026-10804 · GHSA-VQWP-45WM-R9R5Version ranges need review. streamlitRed Hat Enterprise Linux AI (RHEL AI) 3/rhelai3/bootc-cuda-rhel9 PyPIRed Hat Low Fix reported
Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)CVE-2026-33682 · GHSA-7P48-42J8-8846Version ranges need review. streamlit PyPI Medium Fix reported
Minor fix to previous patch for CVE-2022-35918GHSA-8QW9-GF7W-42X5 streamlit PyPI Medium Fix reported
Path traveral in Streamlit on windowsCVE-2024-42474 · GHSA-RXFF-VR5R-8CJ5Version ranges need review. streamlit PyPI Medium Fix reported
Streamlit publishes previously-patched Cross-site Scripting vulnerabilityCVE-2023-27494 · GHSA-9C6G-QPGJ-RVXWVersion ranges need review. streamlit PyPI Medium Fix reported
Streamlit directory traversal vulnerabilityCVE-2022-35918 · GHSA-V4HR-4JPX-56GCVersion ranges need review. streamlit PyPI Medium Fix reported