PyPI/streamlit CVE-2023-27494: medium 5.9, EPSS 0.41%

Streamlit publishes previously-patched Cross-site Scripting vulnerability

Action: Upgrade streamlit to 0.81.0 or later.

pip install streamlit==0.81.0

Affected

Fixed versions

Sources

• osv: GHSA-9c6g-qpgj-rvxw
• https://github.com/streamlit/streamlit/security/advisories/GHSA-9c6g-qpgj-rvxw
• https://nvd.nist.gov/vuln/detail/CVE-2023-27494
• https://github.com/streamlit/streamlit/commit/afcf880c60e5d7538936cc2d9721b9e1bc02b075
• https://github.com/pypa/advisory-database/tree/main/vulns/streamlit/PYSEC-2023-50.yaml
• https://github.com/streamlit/streamlit

CVE-2023-27494 · published 2023-03-17T14:43:03Z · modified 2024-10-28T14:44:06.146639Z · JSON