PyPI/streamlit CVE-2022-35918: medium 6.5, EPSS 1.77%

Streamlit directory traversal vulnerability

Action: Upgrade streamlit to 1.11.1 or later.

pip install streamlit==1.11.1

Affected

Fixed versions

Sources

• osv: GHSA-v4hr-4jpx-56gc
• https://github.com/streamlit/streamlit/security/advisories/GHSA-v4hr-4jpx-56gc
• https://nvd.nist.gov/vuln/detail/CVE-2022-35918
• https://github.com/streamlit/streamlit/commit/80d9979d5f4a00217743d607078a1d867fad8acf
• https://github.com/pypa/advisory-database/tree/main/vulns/streamlit/PYSEC-2022-248.yaml
• https://github.com/streamlit/streamlit

CVE-2022-35918 · published 2022-08-06T05:51:50Z · modified 2023-11-08T04:09:52.554382Z · JSON