CVE-2026-33682
2 advisories.
PyPI/streamlit CVE-2026-33682: medium 4.7, EPSS 0.36%
Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)
Action: Upgrade streamlit to 1.54.0 or later.
pip install streamlit==1.54.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.54.0 | - |
Fixed versions
| 1.54.0 |
Sources
- osv: GHSA-7p48-42j8-8846
- https://github.com/streamlit/streamlit/security/advisories/GHSA-7p48-42j8-8846
- https://nvd.nist.gov/vuln/detail/CVE-2026-33682
- https://github.com/streamlit/streamlit/commit/23692ca70b2f2ac720c72d1feb4f190c9d6eed76
- https://github.com/streamlit/streamlit
- https://github.com/streamlit/streamlit/releases/tag/1.54.0
CVE-2026-33682 · published · modified · JSON
PyPI/streamlit CVE-2026-33682: medium 4.8, EPSS 0.36%
Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery (
Action: Upgrade streamlit to 1.54.0 or later.
pip install streamlit==1.54.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.54.0 | - |
Fixed versions
| 1.54.0 |
Sources
- osv: PYSEC-2026-2285
- https://github.com/streamlit/streamlit/releases/tag/1.54.0
- https://github.com/streamlit/streamlit/security/advisories/GHSA-7p48-42j8-8846
- https://github.com/streamlit/streamlit/commit/23692ca70b2f2ac720c72d1feb4f190c9d6eed76
CVE-2026-33682 · published · modified · JSON