Streamlit (Python) – Support, CVEs & Health

Security

Known Vulnerabilities

10 active CVEs reported via OSV.dev

GHSA-7p48-42j8-8846 CVSS_V3

Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)

Published: 2026-03-25 Fixed in: 1.54.0

GHSA-8qw9-gf7w-42x5 CVSS_V3

Minor fix to previous patch for CVE-2022-35918

Published: 2024-01-12 Fixed in: 1.30.0

GHSA-9c6g-qpgj-rvxw CVSS_V3

Streamlit publishes previously-patched Cross-site Scripting vulnerability

Published: 2023-03-17 Fixed in: 0.81.0

GHSA-rxff-vr5r-8cj5 CVSS_V3

Path traveral in Streamlit on windows

Published: 2024-08-12 Fixed in: 1.37.0

GHSA-v4hr-4jpx-56gc CVSS_V3

Streamlit directory traversal vulnerability

Published: 2022-08-06 Fixed in: 1.11.1

GHSA-vqwp-45wm-r9r5 CVSS_V3

Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

Published: 2026-06-04 Fixed in: 1.53.1

PYSEC-2022-248 Unknown

Published: 2022-08-01 Fixed in: 80d9979d5f4a00217743d607078a1d867fad8acf

PYSEC-2023-50 Unknown

Published: 2023-03-16 Fixed in: afcf880c60e5d7538936cc2d9721b9e1bc02b075

PYSEC-2024-153 CVSS_V3

Published: 2024-08-12 Fixed in: 3a639859cfdfba2187c81897d44a3e33825eb0a3

PYSEC-2026-212 CVSS_V3

Published: 2026-06-04 Fixed in: 1.53.1