pull-the-pitcher (>=0.1.6, <=0.1.11) potentially affected by CVE-2024-42474 via streamlit (0.6.0)

streamlit PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - pull-the-pitcher =0.1.6, =0.1.11 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

wraplot (0.1.1) potentially affected by CVE-2024-42474 via streamlit (0.51.0)

streamlit PYPI version 0.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - wraplot 0.1.1 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

raylab (>=0.8.3, <=0.10.7) potentially affected by CVE-2024-42474 via streamlit (0.62.1)

streamlit PYPI version 0.62.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.8.3, =0.10.7 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

raylab (>=0.13.6, <=0.14.0), stqdm (0.0.2) potentially affected by CVE-2024-42474 via streamlit (0.66.0)

streamlit PYPI version 0.66.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.13.6, =0.14.0 - stqdm 0.0.2 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

onelearn (>=0.1.1, <=0.3.0) potentially affected by CVE-2024-42474 via streamlit (0.49.0)

streamlit PYPI version 0.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - onelearn =0.1.1, =0.3.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

mars-gym (0.1.0) potentially affected by CVE-2024-42474 via streamlit (0.62.0)

streamlit PYPI version 0.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mars-gym 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

colornet (0.2.0), keras-metric-learning (0.2.0) +5 more potentially affected by CVE-2024-42474 via streamlit (0.53.0)

streamlit PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - colornet 0.2.0 - keras-metric-learning 0.2.0 - neural-art 0.2.0 - openleveldb 0.1.0 - punditkit 0.0.2 - pyraytracer 0.2.0 - pytorchjeeves 0.2...

covid-models (>=0.1.1, <=0.1.2) potentially affected by CVE-2024-42474 via streamlit (0.57.3)

streamlit PYPI version 0.57.3 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - covid-models =0.1.1, =0.1.2 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

libra (1.2.2), pymedphys (>=0.32.0.dev5, <=0.32.0) +1 more potentially affected by CVE-2024-42474 via streamlit (0.64.0)

streamlit PYPI version 0.64.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - libra 1.2.2 - pymedphys =0.32.0.dev5, =0.11.1, =0.12.1 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

bubbletea-py (>=0.0.3, <=0.0.7), ezancestry (>=0.0.1, <=0.0.7) +2 more potentially affected by CVE-2024-42474 via streamlit (0.87.0)

streamlit PYPI version 0.87.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py =0.0.3, =0.0.1, =0.15.0, =0.15.6 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

raylab (>=0.14.16, <=0.14.17), stqdm (>=0.0.0, <=0.0.1) potentially affected by CVE-2024-42474 via streamlit (0.71.0)

streamlit PYPI version 0.71.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.14.16, =0.0.0, =0.0.1 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

openkiwi-tasting (0.1.0), raylab (>=0.14.12, <=0.14.14) potentially affected by CVE-2024-42474 via streamlit (0.69.2)

streamlit PYPI version 0.69.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - openkiwi-tasting 0.1.0 - raylab =0.14.12, =0.14.14 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

augbuilder (>=0.0.2, <=0.0.3), pymedphys (0.33.0.dev0) +2 more potentially affected by CVE-2024-42474 via streamlit (0.65.2)

streamlit PYPI version 0.65.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - augbuilder =0.0.2, =0.12.2, =0.13.5 - vizdxp 0.0.1 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

advanced-data-generator (1.0.0), agentbruno (>=0.0.2, <=0.0.5) +171 more potentially affected by CVE-2024-42474 via streamlit (>=1.0.0, <=1.36.0)

streamlit PYPI version =1.0.0, =0.0.2, =1.0.4, =0.8.0, =0.4.1, =1.6.1, =0.2.0, =0.0.7, =0.1.0, =0.1.0, =0.1.72 and more Source cves: CVE-2024-42474 Source advisory: GHSA-RXFF-VR5R-8CJ5...

raylab (0.15.0) potentially affected by CVE-2024-42474 via streamlit (0.74.1)

streamlit PYPI version 0.74.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab 0.15.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

pull-the-pitcher (>=0.1.12, <=0.1.14), raylab (>=0.10.8, <=0.11.0) potentially affected by CVE-2024-42474 via streamlit (0.63.1)

streamlit PYPI version 0.63.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - pull-the-pitcher =0.1.12, =0.10.8, =0.11.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

mt-telescope (>=0.0.1rc1, <=0.0.2), suzieq (>=0.11.0, <=0.12.0) potentially affected by CVE-2024-42474 via streamlit (0.79.0)

streamlit PYPI version 0.79.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mt-telescope =0.0.1rc1, =0.11.0, =0.12.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

Path traveral in Streamlit on windows

Impacted Products Streamilt Open Source versions before 1.37.0. 2. Introduction Snowflake Streamlit open source addressed a security vulnerability via the static file sharing feature. The vulnerability was patched on Jul 25, 2024, as part of Streamlit open source version 1.37.0. The...

raylab (>=0.14.1, <=0.14.10) potentially affected by CVE-2024-42474 via streamlit (0.67.1)

streamlit PYPI version 0.67.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.14.1, =0.14.10 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

GHSA-RXFF-VR5R-8CJ5 Path traveral in Streamlit on windows

Impacted Products Streamilt Open Source versions before 1.37.0. 2. Introduction Snowflake Streamlit open source addressed a security vulnerability via the static file sharing feature. The vulnerability was patched on Jul 25, 2024, as part of Streamlit open source version 1.37.0. The...