MEDIUM4.7PyPI
GHSA-7p48-42j8-8846· CVE-2026-33682, PYSEC-2026-2285Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)
Modified: 7/13/2026
package
PyPI/streamlit
pkg:pypi/streamlit
MEDIUM5.3PyPI
GHSA-8qw9-gf7w-42x5Minor fix to previous patch for CVE-2022-35918
Modified: 6/30/2026
MEDIUM5.9PyPI
GHSA-9c6g-qpgj-rvxw· CVE-2023-27494, PYSEC-2023-50Streamlit publishes previously-patched Cross-site Scripting vulnerability
Modified: 10/28/2024
MEDIUM5.9PyPI
GHSA-rxff-vr5r-8cj5· CVE-2024-42474, PYSEC-2024-153Path traveral in Streamlit on windows
Modified: 11/26/2024
MEDIUM6.5PyPI
GHSA-v4hr-4jpx-56gc· CVE-2022-35918, PYSEC-2022-248Streamlit directory traversal vulnerability
Modified: 11/8/2023
LOW3.6PyPI
GHSA-vqwp-45wm-r9r5· CVE-2026-10804, PYSEC-2026-212Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission
Modified: 7/15/2026
—PyPI
PYSEC-2022-248· CVE-2022-35918, GHSA-v4hr-4jpx-56gcModified: 11/8/2023
—PyPI
PYSEC-2023-50· CVE-2023-27494, GHSA-9c6g-qpgj-rvxwModified: 11/8/2023
MEDIUM6.5PyPI
PYSEC-2024-153· CVE-2024-42474, GHSA-rxff-vr5r-8cj5Modified: 11/25/2024
MEDIUM4.7PyPI
PYSEC-2026-212· CVE-2026-10804, GHSA-vqwp-45wm-r9r5Modified: 7/23/2026
MEDIUM4.8PyPI
PYSEC-2026-2285· CVE-2026-33682, GHSA-7p48-42j8-8846Modified: 7/13/2026