bubbletea-py (>=0.0.3, <=0.0.7), ezancestry (>=0.0.1, <=0.0.7) +2 more potentially affected by CVE-2026-33682 via streamlit (0.87.0)

streamlit PYPI version 0.87.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py =0.0.3, =0.0.1, =0.15.0, =0.15.6 Source cves: CVE-2026-33682 Source advisory: OSV:PYSEC-2026-2285...

alphapept (0.3.29), classy-core (>=0.1.0.dev20211019, <=0.2.0) +3 more potentially affected by CVE-2026-33682 via streamlit (0.88.0)

streamlit PYPI version 0.88.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - alphapept 0.3.29 - classy-core =0.1.0.dev20211019, =0.0.143, =0.4.0, =0.0.3, =0.0.4 Source cves: CVE-2026-33682 Source advisory:...

streamlit-aggrid (0.2.2), streamlit-inspect (0.1.0) potentially affected by CVE-2026-33682 via streamlit (0.89.0)

streamlit PYPI version 0.89.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - streamlit-aggrid 0.2.2 - streamlit-inspect 0.1.0 Source cves: CVE-2026-33682 Source advisory: OSV:PYSEC-2026-2285...

ace-cm (>=0.0.1, <=0.0.4), active-framework (>=2.0.0, <=2.0.9) +313 more potentially affected by CVE-2026-33682 via streamlit (>=1.0.0, <=1.53.1)

streamlit PYPI version =1.0.0, =0.0.1, =2.0.0, =0.0.0, =1.2.1, =0.0.2, =0.1.0, =0.0.0, =0.2.0, =0.1.0.post0, =0.1.1.post74 and more Source cves: CVE-2026-33682 Source advisory: OSV:PYSEC-2026-2285...

PYSEC-2026-2285

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery SSRF vulnerability. The vulnerability arises from improper validation of attacker-supplied...

PYSEC-2026-2285

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery SSRF vulnerability. The vulnerability arises from improper validation of attacker-supplied...

CVE-2026-33682 Streamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure)

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery SSRF vulnerability. The vulnerability arises from improper validation of attacker-supplied...

CVE-2026-33682 Streamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure)

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery SSRF vulnerability. The vulnerability arises from improper validation of attacker-supplied...

CVE-2026-33682

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery SSRF vulnerability. The vulnerability arises from improper validation of attacker-supplied...

ace-cm (>=0.0.1, <=0.0.4), active-framework (>=2.0.0, <=2.0.9) +365 more potentially affected by CVE-2026-33682 via streamlit (>=0.6.0, <=1.53.1)

streamlit PYPI version =0.6.0, =0.0.1, =2.0.0, =0.0.0, =1.2.1, =0.0.2, =0.1.0, =0.0.0, =0.2.0, =0.1.0.post0, =0.1.1.post74 and more Source cves: CVE-2026-33682 Source advisory: MEND:CVE-2026-33682...

CVE-2026-33682

CVE-2026-33682 (Streamlit) affects Windows deployments of Streamlit Open Source up to version 1.53.x. The issue is an SSRF vulnerability caused by insufficient validation of attacker-controlled filesystem paths in component request handling (notably ComponentRequestHandler). On Windows, supplying...

CVE-2026-33682 Streamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure)

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery SSRF vulnerability. The vulnerability arises from improper validation of attacker-supplied...

Streamlit code issues and vulnerabilities

Streamlit is an open-source data-oriented Python application development framework created by Streamlit. Versions of Streamlit prior to 1.54.0 contained code vulnerabilities. These vulnerabilities stemmed from improper validation of file system paths provided by attackers, which could lead to...

CVE-2026-33682: Server-Side Request Forgery (SSRF)

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery SSRF vulnerability. The vulnerability arises from improper validation of attacker-supplied...

Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)

Streamlit Open Source Security Advisory 1. Impacted Products Streamlit Open Source versions prior to 1.54.0 running on Windows hosts. 2. Introduction Snowflake Streamlit Open Source addressed a security vulnerability affecting Windows deployments related to improper handling and validation of...

GHSA-7P48-42J8-8846 Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)

Streamlit Open Source Security Advisory 1. Impacted Products Streamlit Open Source versions prior to 1.54.0 running on Windows hosts. 2. Introduction Snowflake Streamlit Open Source addressed a security vulnerability affecting Windows deployments related to improper handling and validation of...

Server-side Request Forgery (SSRF)

Overview streamlit is a The fastest way to build data apps in Python Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to improper validation of filesystem paths in the ComponentRequestHandler process. An attacker can trigger outbound SMB authentication...

pull-the-pitcher (>=0.1.6, <=0.1.11) potentially affected by CVE-2026-33682 via streamlit (0.6.0)

streamlit PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - pull-the-pitcher =0.1.6, =0.1.11 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

onelearn (>=0.1.1, <=0.3.0) potentially affected by CVE-2026-33682 via streamlit (0.49.0)

streamlit PYPI version 0.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - onelearn =0.1.1, =0.3.0 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

wraplot (0.1.1) potentially affected by CVE-2026-33682 via streamlit (0.51.0)

streamlit PYPI version 0.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - wraplot 0.1.1 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...