CVE-2024-42474

Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a security vulnerability via the static file sharing feature. Users of hosted Streamlit apps on Windows were vulnerable to a path traversal vulnerability when the static file shari...

maupassant (0.1.1) potentially affected by CVE-2024-42474 via streamlit (0.65.0)

streamlit PYPI version 0.65.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - maupassant 0.1.1 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

madan (0.1.0), sapsan (>=0.4.4, <=0.5.0) +1 more potentially affected by CVE-2024-42474 via streamlit (0.84.2)

streamlit PYPI version 0.84.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - madan 0.1.0 - sapsan =0.4.4, =0.5.0 - streamlit-pages 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

raylab (0.15.0) potentially affected by CVE-2024-42474 via streamlit (0.74.1)

streamlit PYPI version 0.74.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab 0.15.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

bqtxflowutils-2 (>=0.0.4, <=0.0.6), example-pkg-again (>=0.0.1, <=0.0.3) +4 more potentially affected by CVE-2024-42474 via streamlit (0.83.0)

streamlit PYPI version 0.83.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bqtxflowutils-2 =0.0.4, =0.0.1, =0.0.1, =0.0.5, =0.0.8 - sundial-framework 0.1.0 Source cves: CVE-2024-42474 Source advisory:...

advanced-data-generator (1.0.0), agentbruno (>=0.0.2, <=0.0.5) +171 more potentially affected by CVE-2024-42474 via streamlit (>=1.0.0, <=1.36.0)

streamlit PYPI version =1.0.0, =0.0.2, =1.0.4, =0.8.0, =0.4.1, =1.6.1, =0.2.0, =0.0.7, =0.1.0, =0.1.0, =0.1.72 and more Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

pull-the-pitcher (>=0.1.6, <=0.1.11) potentially affected by CVE-2024-42474 via streamlit (0.6.0)

streamlit PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - pull-the-pitcher =0.1.6, =0.1.11 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

wraplot (0.1.1) potentially affected by CVE-2024-42474 via streamlit (0.51.0)

streamlit PYPI version 0.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - wraplot 0.1.1 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

sapsan (>=0.1.1, <=0.3.0) potentially affected by CVE-2024-42474 via streamlit (0.58.0)

streamlit PYPI version 0.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - sapsan =0.1.1, =0.3.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

raylab (>=0.8.3, <=0.10.7) potentially affected by CVE-2024-42474 via streamlit (0.62.1)

streamlit PYPI version 0.62.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.8.3, =0.10.7 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

raylab (>=0.13.6, <=0.14.0), stqdm (0.0.2) potentially affected by CVE-2024-42474 via streamlit (0.66.0)

streamlit PYPI version 0.66.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.13.6, =0.14.0 - stqdm 0.0.2 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

punditkit (0.0.1) potentially affected by CVE-2024-42474 via streamlit (0.52.2)

streamlit PYPI version 0.52.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - punditkit 0.0.1 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

colornet (0.2.0), keras-metric-learning (0.2.0) +5 more potentially affected by CVE-2024-42474 via streamlit (0.53.0)

streamlit PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - colornet 0.2.0 - keras-metric-learning 0.2.0 - neural-art 0.2.0 - openleveldb 0.1.0 - punditkit 0.0.2 - pyraytracer 0.2.0 - pytorchjeeves 0.2...

covid-models (>=0.1.1, <=0.1.2) potentially affected by CVE-2024-42474 via streamlit (0.57.3)

streamlit PYPI version 0.57.3 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - covid-models =0.1.1, =0.1.2 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

libra (1.2.2), pymedphys (>=0.32.0.dev5, <=0.32.0) +1 more potentially affected by CVE-2024-42474 via streamlit (0.64.0)

streamlit PYPI version 0.64.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - libra 1.2.2 - pymedphys =0.32.0.dev5, =0.11.1, =0.12.1 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

neuralartstudio (0.1.0) potentially affected by CVE-2024-42474 via streamlit (0.61.0)

streamlit PYPI version 0.61.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - neuralartstudio 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

onelearn (>=0.1.1, <=0.3.0) potentially affected by CVE-2024-42474 via streamlit (0.49.0)

streamlit PYPI version 0.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - onelearn =0.1.1, =0.3.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

hlm-texts (0.1.2), suzieq (>=0.8.0, <=0.10.0) potentially affected by CVE-2024-42474 via streamlit (0.72.0)

streamlit PYPI version 0.72.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - hlm-texts 0.1.2 - suzieq =0.8.0, =0.10.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

raylab (>=0.15.5, <=0.15.9), rrshare (>=2.4.30, <=3.5.17) +2 more potentially affected by CVE-2024-42474 via streamlit (0.80.0)

streamlit PYPI version 0.80.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.15.5, =2.4.30, =0.1.0, =0.2.10 - streamlit-prophet 1.0.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

bqtxflowutils-2 (>=0.0.4, <=0.0.6), example-pkg-again (>=0.0.1, <=0.0.3) +4 more potentially affected by CVE-2024-42474 via streamlit (0.83.0)

streamlit PYPI version 0.83.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bqtxflowutils-2 =0.0.4, =0.0.1, =0.0.1, =0.0.5, =0.0.8 - sundial-framework 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-...