raylab (>=0.14.16, <=0.14.17), stqdm (>=0.0.0, <=0.0.1) potentially affected by CVE-2024-42474 via streamlit (0.71.0)

streamlit PYPI version 0.71.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.14.16, =0.0.0, =0.0.1 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

hlm-texts (0.1.2), suzieq (>=0.8.0, <=0.10.0) potentially affected by CVE-2024-42474 via streamlit (0.72.0)

streamlit PYPI version 0.72.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - hlm-texts 0.1.2 - suzieq =0.8.0, =0.10.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

raylab (0.15.0) potentially affected by CVE-2024-42474 via streamlit (0.74.1)

streamlit PYPI version 0.74.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab 0.15.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

PYSEC-2024-153

Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a security vulnerability via the static file sharing feature. Users of hosted Streamlit apps on Windows were vulnerable to a path traversal vulnerability when the static file shari...

punditkit (0.0.1) potentially affected by CVE-2024-42474 via streamlit (0.52.2)

streamlit PYPI version 0.52.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - punditkit 0.0.1 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

pull-the-pitcher (>=0.1.6, <=0.1.11) potentially affected by CVE-2024-42474 via streamlit (0.6.0)

streamlit PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - pull-the-pitcher =0.1.6, =0.1.11 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

onelearn (>=0.1.1, <=0.3.0) potentially affected by CVE-2024-42474 via streamlit (0.49.0)

streamlit PYPI version 0.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - onelearn =0.1.1, =0.3.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

raylab (>=0.8.3, <=0.10.7) potentially affected by CVE-2024-42474 via streamlit (0.62.1)

streamlit PYPI version 0.62.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.8.3, =0.10.7 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

mars-gym (0.1.0) potentially affected by CVE-2024-42474 via streamlit (0.62.0)

streamlit PYPI version 0.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mars-gym 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

pull-the-pitcher (>=0.1.12, <=0.1.14), raylab (>=0.10.8, <=0.11.0) potentially affected by CVE-2024-42474 via streamlit (0.63.1)

streamlit PYPI version 0.63.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - pull-the-pitcher =0.1.12, =0.10.8, =0.11.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

bqtxflowutils-2 (>=0.0.4, <=0.0.6), example-pkg-again (>=0.0.1, <=0.0.3) +4 more potentially affected by CVE-2024-42474 via streamlit (0.83.0)

streamlit PYPI version 0.83.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bqtxflowutils-2 =0.0.4, =0.0.1, =0.0.1, =0.0.5, =0.0.8 - sundial-framework 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-...

raylab (>=0.16.0, <=0.16.1), streamlit-azure-ad-login (0.1.0) +1 more potentially affected by CVE-2024-42474 via streamlit (0.85.1)

streamlit PYPI version 0.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - raylab =0.16.0, =0.1.0, =2.0.8 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

madan (0.1.0), sapsan (>=0.4.4, <=0.5.0) +1 more potentially affected by CVE-2024-42474 via streamlit (0.84.2)

streamlit PYPI version 0.84.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - madan 0.1.0 - sapsan =0.4.4, =0.5.0 - streamlit-pages 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

bubbletea-py (0.0.2), streamlit-kpi-metric (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-42474 via streamlit (0.86.0)

streamlit PYPI version 0.86.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.2 - streamlit-kpi-metric =0.1.0, =0.1.1 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

alphapept (0.3.29), classy-core (>=0.1.0.dev20211019, <=0.2.0) +3 more potentially affected by CVE-2024-42474 via streamlit (0.88.0)

streamlit PYPI version 0.88.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - alphapept 0.3.29 - classy-core =0.1.0.dev20211019, =0.0.143, =0.4.0, =0.0.3, =0.0.4 Source cves: CVE-2024-42474 Source advisory:...

advanced-data-generator (1.0.0), agentbruno (>=0.0.2, <=0.0.5) +171 more potentially affected by CVE-2024-42474 via streamlit (>=1.0.0, <=1.36.0)

streamlit PYPI version =1.0.0, =0.0.2, =1.0.4, =0.8.0, =0.4.1, =1.6.1, =0.2.0, =0.0.7, =0.1.0, =0.1.0, =0.1.72 and more Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

bubbletea-py (>=0.0.3, <=0.0.7), ezancestry (>=0.0.1, <=0.0.7) +2 more potentially affected by CVE-2024-42474 via streamlit (0.87.0)

streamlit PYPI version 0.87.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py =0.0.3, =0.0.1, =0.15.0, =0.15.6 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

streamlit-aggrid (0.2.2), streamlit-inspect (0.1.0) potentially affected by CVE-2024-42474 via streamlit (0.89.0)

streamlit PYPI version 0.89.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - streamlit-aggrid 0.2.2 - streamlit-inspect 0.1.0 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

covid-models (>=0.1.1, <=0.1.2) potentially affected by CVE-2024-42474 via streamlit (0.57.3)

streamlit PYPI version 0.57.3 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - covid-models =0.1.1, =0.1.2 Source cves: CVE-2024-42474 Source advisory: OSV:PYSEC-2024-153...

CVE-2024-42474

Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a security vulnerability via the static file sharing feature. Users of hosted Streamlit apps on Windows were vulnerable to a path traversal vulnerability when the static file shari...