| Package | Affected versions | Patched versions |
|---|---|---|
| streamlit | ≥ 0.63.0, < 1.30.0 | 1.30.0 |
The initial vulnerability identified in Streamlit apps using custom components, allowing for directory traversal attacks, was addressed in version 1.11.1. However, a minor issue persisted, which could still potentially expose certain files on the server file-system under specific conditions.
We released an update in version 1.30.0 to further tighten security measures. Users are strongly advised to update to version 1.30.0 immediately for optimal security.
No additional workarounds are necessary once the update to version 1.30.0 is applied.
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free