AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

chainlit security advisories

6 advisories · 4 critical or high in 12 months · latest Aug 25

Repository

6 advisories

High 7.2Aug 25chainlit: server-side request forgeryCVE-2026-120492fixed in 2.12.0Critical 9.8Aug 25Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code executionCVE-2026-45018fixed in 2.12.0Critical 7.4Jun 22Chainlit contains a session hijacking vulnerabilityCVE-2026-56104fixed in 2.10.1High 7.7Jan 20Chainlit contain a server-side request forgery (SSRF) vulnerabilityCVE-2026-22219fixed in 2.9.4Medium 6.5Jan 20chainlit: arbitrary file readCVE-2026-22218fixed in 2.9.4Low 4.2Jan 14Chainlit contains an authorization bypass vulnerabilityCVE-2025-68492fixed in 2.8.5
About chainlit

Build Conversational AI in minutes ⚡️

Packages watched: chainlit (PyPI).

Chainlit/chainlitOn Repos