{"data":{"id":"41eaa91c-f59f-46b7-b23a-03c8d55c2be9","title":"CVE-2023-27494: Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in…","summary":"CVE-2023-27494 is a reflected cross-site scripting (XSS) vulnerability in Streamlit versions 0.63.0 through 0.80.0. An attacker could craft a malicious URL containing JavaScript payloads to a hosted Streamlit app, then trick a user into visiting it, and the server would render the payload as-is.","solution":"Fixed in 0.81.0, which contains a patch for this vulnerability.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-27494","publishedAt":"2023-03-17T01:15:13.270Z","cveId":"CVE-2023-27494","cweIds":["CWE-79"],"cvssScore":"5.9","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["streamlit@>= 0.63.0, < 0.81.0 (fixed: 0.81.0)"],"affectedPackageNames":["streamlit"],"affectedPackageRefs":["pypi:streamlit"],"affectedVendors":[],"affectedVendorsRaw":["Streamlit"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0041,"epssCheckedAt":"2026-11-04T06:10:14.410Z","kevDateAdded":null,"advisoryAliases":["GHSA-9c6g-qpgj-rvxw"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:57:17.703Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2021-04-29T17:41:29.529Z","daysToFix":-687,"fixCheckedAt":"2026-10-29T21:47:25.560Z","capecIds":["CAPEC-198","CAPEC-86"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.6,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"streamlit","fixedVersion":"0.81.0","matchedVersion":"0.81.0","fixReleasedAt":"2021-04-29T17:41:29.529Z","daysToFix":-687,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:47:25.409Z"}]}}