GHSA-RXFF-VR5R-8CJ5 Path traveral in Streamlit on windows

Impacted Products Streamilt Open Source versions before 1.37.0. 2. Introduction Snowflake Streamlit open source addressed a security vulnerability via the static file sharing feature. The vulnerability was patched on Jul 25, 2024, as part of Streamlit open source version 1.37.0. The...

bubbletea-py (0.0.1), raylab (0.15.10) +3 more potentially affected by CVE-2024-42474 via streamlit (0.82.0)

streamlit PYPI version 0.82.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.1 - raylab 0.15.10 - suzieq =0.13.0, =0.14.2 - torchserve-dashboard 0.4.0 - twilight-nlp 0.1.0 Source cves: CVE-2024-42474...

torchserve-dashboard (>=0.3.1, <=0.3.3) potentially affected by CVE-2024-42474 via streamlit (0.81.1)

streamlit PYPI version 0.81.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - torchserve-dashboard =0.3.1, =0.3.3 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

raylab (>=0.16.0, <=0.16.1), streamlit-azure-ad-login (0.1.0) +1 more potentially affected by CVE-2024-42474 via streamlit (0.85.1)

streamlit PYPI version 0.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.16.0, =0.1.0, =2.0.8 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

neuralartstudio (0.1.0) potentially affected by CVE-2024-42474 via streamlit (0.61.0)

streamlit PYPI version 0.61.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - neuralartstudio 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

raylab (>=0.15.5, <=0.15.9), rrshare (>=2.4.30, <=3.5.17) +2 more potentially affected by CVE-2024-42474 via streamlit (0.80.0)

streamlit PYPI version 0.80.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.15.5, =2.4.30, =0.1.0, =0.2.10 - streamlit-prophet 1.0.0 Source cves: CVE-2024-42474 Source advisory: OSV:GHSA-RXFF-VR5R-8CJ5...

pull-the-pitcher (>=0.1.12, <=0.1.14), raylab (>=0.10.8, <=0.11.0) potentially affected by CVE-2024-42474 via streamlit (0.63.1)

streamlit PYPI version 0.63.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - pull-the-pitcher =0.1.12, =0.10.8, =0.11.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

raylab (>=0.8.3, <=0.10.7) potentially affected by CVE-2024-42474 via streamlit (0.62.1)

streamlit PYPI version 0.62.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.8.3, =0.10.7 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

bubbletea-py (0.0.2), streamlit-kpi-metric (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-42474 via streamlit (0.86.0)

streamlit PYPI version 0.86.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.2 - streamlit-kpi-metric =0.1.0, =0.1.1 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

raylab (>=0.15.5, <=0.15.9), rrshare (>=2.4.30, <=3.5.17) +2 more potentially affected by CVE-2024-42474 via streamlit (0.80.0)

streamlit PYPI version 0.80.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.15.5, =2.4.30, =0.1.0, =0.2.10 - streamlit-prophet 1.0.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

raylab (>=0.16.0, <=0.16.1), streamlit-azure-ad-login (0.1.0) +1 more potentially affected by CVE-2024-42474 via streamlit (0.85.1)

streamlit PYPI version 0.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.16.0, =0.1.0, =2.0.8 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

mars-gym (0.1.0) potentially affected by CVE-2024-42474 via streamlit (0.62.0)

streamlit PYPI version 0.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mars-gym 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

raylab (0.15.0) potentially affected by CVE-2024-42474 via streamlit (0.74.1)

streamlit PYPI version 0.74.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab 0.15.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

carbonify (>=0.1.0, <=0.1.1), unity-cv-datasetvisualizer (>=0.0.1, <=0.1.2) potentially affected by CVE-2024-42474 via streamlit (0.84.1)

streamlit PYPI version 0.84.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - carbonify =0.1.0, =0.0.1, =0.1.2 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

bqtxflowutils-2 (>=0.0.4, <=0.0.6), example-pkg-again (>=0.0.1, <=0.0.3) +4 more potentially affected by CVE-2024-42474 via streamlit (0.83.0)

streamlit PYPI version 0.83.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bqtxflowutils-2 =0.0.4, =0.0.1, =0.0.1, =0.0.5, =0.0.8 - sundial-framework 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-...

madan (0.1.0), sapsan (>=0.4.4, <=0.5.0) +1 more potentially affected by CVE-2024-42474 via streamlit (0.84.2)

streamlit PYPI version 0.84.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - madan 0.1.0 - sapsan =0.4.4, =0.5.0 - streamlit-pages 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

liveisstracker (>=0.0.2, <=1.0.12), raylab (>=0.15.1, <=0.15.4) potentially affected by CVE-2024-42474 via streamlit (0.78.0)

streamlit PYPI version 0.78.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - liveisstracker =0.0.2, =0.15.1, =0.15.4 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

torchserve-dashboard (>=0.3.1, <=0.3.3) potentially affected by CVE-2024-42474 via streamlit (0.81.1)

streamlit PYPI version 0.81.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - torchserve-dashboard =0.3.1, =0.3.3 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

advanced-data-generator (1.0.0), agentbruno (>=0.0.2, <=0.0.5) +171 more potentially affected by CVE-2024-42474 via streamlit (>=1.0.0, <=1.36.0)

streamlit PYPI version =1.0.0, =0.0.2, =1.0.4, =0.8.0, =0.4.1, =1.6.1, =0.2.0, =0.0.7, =0.1.0, =0.1.0, =0.1.72 and more Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

punditkit (0.0.1) potentially affected by CVE-2024-42474 via streamlit (0.52.2)

streamlit PYPI version 0.52.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - punditkit 0.0.1 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...