Vulnerabilities

TI-2026-09272 CVE-2026-10804 · GHSA-vqwp-45wm-r9r5

Streamlit Palette hashing.py weak hash

MEDIUM 44

A vulnerability has been found in Streamlit up to 1.53.0.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00083 Published 2026-06-04 Partial fix · 1.53.1 CWE-327

TI-2026-26062 CVE-2026-33682 · GHSA-7p48-42j8-8846

LOW 22

Streamlit is a data oriented application development framework for python.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00296 Published 2026-03-26 Fixed in 1.54.0 CWE-918

TI-2024-28442 CVE-2024-42474 · GHSA-rxff-vr5r-8cj5

LOW 30

Streamlit is a data oriented application development framework for python.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00568 Published 2024-08-12 Fixed in 1.37.0 CWE-22

TI-2023-12222 CVE-2023-27494 · GHSA-9c6g-qpgj-rvxw

LOW 27

Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in versions 0.63.0 through 0.80.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00407 Published 2023-03-16 Fixed in 0.81.0 CWE-79

TI-2022-16345 CVE-2022-35918 · GHSA-v4hr-4jpx-56gc

LOW 32

Streamlit is a data oriented application development framework for python.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01767 Published 2022-08-01 Fixed in 1.11.1 CWE-22