mt-telescope (>=0.0.1rc1, <=0.0.2), suzieq (>=0.11.0, <=0.12.0) potentially affected by CVE-2026-33682 via streamlit (0.79.0)

streamlit PYPI version 0.79.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mt-telescope =0.0.1rc1, =0.11.0, =0.12.0 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

raylab (>=0.15.5, <=0.15.9), rrshare (>=2.4.30, <=3.5.17) +2 more potentially affected by CVE-2026-33682 via streamlit (0.80.0)

streamlit PYPI version 0.80.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.15.5, =2.4.30, =0.1.0, =0.2.10 - streamlit-prophet 1.0.0 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

torchserve-dashboard (>=0.3.1, <=0.3.3) potentially affected by CVE-2026-33682 via streamlit (0.81.1)

streamlit PYPI version 0.81.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - torchserve-dashboard =0.3.1, =0.3.3 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

bubbletea-py (0.0.1), raylab (0.15.10) +3 more potentially affected by CVE-2026-33682 via streamlit (0.82.0)

streamlit PYPI version 0.82.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.1 - raylab 0.15.10 - suzieq =0.13.0, =0.14.2 - torchserve-dashboard 0.4.0 - twilight-nlp 0.1.0 Source cves: CVE-2026-33682...

bqtxflowutils-2 (>=0.0.4, <=0.0.6), example-pkg-again (>=0.0.1, <=0.0.3) +4 more potentially affected by CVE-2026-33682 via streamlit (0.83.0)

streamlit PYPI version 0.83.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bqtxflowutils-2 =0.0.4, =0.0.1, =0.0.1, =0.0.5, =0.0.8 - sundial-framework 0.1.0 Source cves: CVE-2026-33682 Source advisory:...

carbonify (>=0.1.0, <=0.1.1), unity-cv-datasetvisualizer (>=0.0.1, <=0.1.2) potentially affected by CVE-2026-33682 via streamlit (0.84.1)

streamlit PYPI version 0.84.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - carbonify =0.1.0, =0.0.1, =0.1.2 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

madan (0.1.0), sapsan (>=0.4.4, <=0.5.0) +1 more potentially affected by CVE-2026-33682 via streamlit (0.84.2)

streamlit PYPI version 0.84.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - madan 0.1.0 - sapsan =0.4.4, =0.5.0 - streamlit-pages 0.1.0 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

raylab (>=0.16.0, <=0.16.1), streamlit-azure-ad-login (0.1.0) +1 more potentially affected by CVE-2026-33682 via streamlit (0.85.1)

streamlit PYPI version 0.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.16.0, =0.1.0, =2.0.8 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

bubbletea-py (0.0.2), streamlit-kpi-metric (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-33682 via streamlit (0.86.0)

streamlit PYPI version 0.86.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.2 - streamlit-kpi-metric =0.1.0, =0.1.1 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

bubbletea-py (>=0.0.3, <=0.0.7), ezancestry (>=0.0.1, <=0.0.7) +2 more potentially affected by CVE-2026-33682 via streamlit (0.87.0)

streamlit PYPI version 0.87.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py =0.0.3, =0.0.1, =0.15.0, =0.15.6 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

alphapept (0.3.29), classy-core (>=0.1.0.dev20211019, <=0.2.0) +3 more potentially affected by CVE-2026-33682 via streamlit (0.88.0)

streamlit PYPI version 0.88.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - alphapept 0.3.29 - classy-core =0.1.0.dev20211019, =0.0.143, =0.4.0, =0.0.3, =0.0.4 Source cves: CVE-2026-33682 Source advisory:...

streamlit-aggrid (0.2.2), streamlit-inspect (0.1.0) potentially affected by CVE-2026-33682 via streamlit (0.89.0)

streamlit PYPI version 0.89.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - streamlit-aggrid 0.2.2 - streamlit-inspect 0.1.0 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

ace-cm (>=0.0.1, <=0.0.4), active-framework (>=2.0.0, <=2.0.9) +313 more potentially affected by CVE-2026-33682 via streamlit (>=1.0.0, <=1.53.1)

streamlit PYPI version =1.0.0, =0.0.1, =2.0.0, =0.0.0, =1.2.1, =0.0.2, =0.1.0, =0.0.0, =0.2.0, =0.1.0.post0, =0.1.1.post74 and more Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

ace-cm (>=0.0.1, <=0.0.4), active-framework (>=2.0.0, <=2.0.9) +313 more potentially affected by CVE-2026-33682 via streamlit (>=1.0.0, <=1.53.1)

streamlit PYPI version =1.0.0, =0.0.1, =2.0.0, =0.0.0, =1.2.1, =0.0.2, =0.1.0, =0.0.0, =0.2.0, =0.1.0.post0, =0.1.1.post74 and more Source cves: CVE-2026-33682 Source advisory: SNYK:PYTHON-STREAMLIT-15782919...

ace-cm (>=0.0.1, <=0.0.4), active-framework (>=2.0.0, <=2.0.9) +313 more potentially affected by CVE-2026-33682 via streamlit (>=1.0.0, <=1.53.1)

streamlit PYPI version =1.0.0, =0.0.1, =2.0.0, =0.0.0, =1.2.1, =0.0.2, =0.1.0, =0.0.0, =0.2.0, =0.1.0.post0, =0.1.1.post74 and more Source cves: CVE-2026-33682 Source advisory: GHSA-7P48-42J8-8846...

PT-2026-28176

Name of the Vulnerable Software and Affected Versions Streamlit versions prior to 1.54.0 Description Streamlit Open Source versions running on Windows hosts are affected by an unauthenticated Server-Side Request Forgery SSRF issue. This arises from insufficient validation of filesystem paths...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2026-31958 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

SQL_ARES_LZL

SQL ARES LZL - Suite de Inyección SQL Avanzada ARES LZL...

admobilizeapis (>=0.0.5, <=0.0.7), c3-reference (1.8.1) +8 more potentially affected by CVE-2026-0994 via protobuf (3.6.0)

protobuf PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - admobilizeapis =0.0.5, =1.1.4, =1.0.5, =1.9.1, =1.10.0 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

CVE-2024-41116

streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the visparams variable on line 1254 in pages/1📷Timelapse.py takes user input, which is later used in the eval function on line 1345, leading to remote code...