Skip to content

Snowflake security advisories

6 advisories across Streamlit

Company profile
DateAdvisory
Jun 4Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission
CVE-2026-10804Low3.6fixed in 1.53.1
Mar 25Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)
CVE-2026-33682Medium4.7fixed in 1.54.0
Aug 122024Path traveral in Streamlit on windows
CVE-2024-42474Medium5.9fixed in 1.37.0
Jan 122024Minor fix to previous patch for CVE-2022-35918
GHSA-8qw9-gf7w-42x5Medium5.3fixed in 1.30.0
Mar 172023Streamlit publishes previously-patched Cross-site Scripting vulnerability
CVE-2023-27494Medium5.9fixed in 0.81.0
Aug 62022Streamlit directory traversal vulnerability
CVE-2022-35918Medium6.5fixed in 1.11.1
About Snowflake

Snowflake Inc. is an American cloud-based artificial intelligence (AI) data platform company founded in San Mateo, California, and headquartered in Menlo Park. It operates a platform that supports data analysis and simultaneous access to data sets with minimal latency.

Elsewhere on fru.dev: Acquisitions · Quarterly · Paydays · Releases · TechConf

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.