PyPI/streamlit CVE-2026-33682: medium 4.8, EPSS 0.30%
Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery (
Action: Upgrade streamlit to 1.54.0 or later.
pip install streamlit==1.54.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.54.0 | - |
Fixed versions
| 1.54.0 |
Sources
- osv: PYSEC-2026-2285
- https://github.com/streamlit/streamlit/releases/tag/1.54.0
- https://github.com/streamlit/streamlit/security/advisories/GHSA-7p48-42j8-8846
- https://github.com/streamlit/streamlit/commit/23692ca70b2f2ac720c72d1feb4f190c9d6eed76
CVE-2026-33682 · published · modified · JSON