Vulnerabilities for streamlit

First version without a known vulnerability: 1.54.0

Details

• GHSA-vqwp-45wm-r9r52026-06-04

  Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

  Fixed in: 1.53.1

• GHSA-7p48-42j8-88462026-03-25

  Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)

  Fixed in: 1.54.0

• GHSA-rxff-vr5r-8cj52024-08-12

  Path traveral in Streamlit on windows

  Fixed in: 1.37.0, 3a639859cfdfba2187c81897d44a3e33825eb0a3

• GHSA-8qw9-gf7w-42x52024-01-12

  Minor fix to previous patch for CVE-2022-35918

  Fixed in: 1.30.0

• GHSA-9c6g-qpgj-rvxw2023-03-17

  Streamlit publishes previously-patched Cross-site Scripting vulnerability

  Fixed in: 0.81.0, afcf880c60e5d7538936cc2d9721b9e1bc02b075

• GHSA-v4hr-4jpx-56gc2022-08-06

  Streamlit directory traversal vulnerability

  Fixed in: 1.11.1, 80d9979d5f4a00217743d607078a1d867fad8acf