Streamlit security advisories
6 advisories · none critical or high in 12 months · latest Jun 4
6 advisories
| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 4 | Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission CVE-2026-10804Low3.6fixed in 1.53.1 | Low3.6 | 1.53.1 |
| Mar 25 | Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure) CVE-2026-33682Medium4.7fixed in 1.54.0 | Medium4.7 | 1.54.0 |
| Aug 122024 | Path traveral in Streamlit on windows CVE-2024-42474Medium5.9fixed in 1.37.0 | Medium5.9 | 1.37.0 |
| Jan 122024 | Minor fix to previous patch for CVE-2022-35918 GHSA-8qw9-gf7w-42x5Medium5.3fixed in 1.30.0 | Medium5.3 | 1.30.0 |
| Mar 172023 | Streamlit publishes previously-patched Cross-site Scripting vulnerability CVE-2023-27494Medium5.9fixed in 0.81.0 | Medium5.9 | 0.81.0 |
| Aug 62022 | Streamlit directory traversal vulnerability CVE-2022-35918Medium6.5fixed in 1.11.1 | Medium6.5 | 1.11.1 |