chainlit vulnerabilities (PyPI)
7 vulnerabilities.
-
chainlitPyPI Chainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed_urls 6.3 Medium -
chainlitPyPI Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network access 7.2 High -
chainlitPyPI Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution 9.8 Critical -
chainlitPyPI Chainlit < 2.10.1 Session Hijacking via WebSocket Session Restoration 8.8 High -
chainlitPyPI Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element 8.3 High -
chainlitPyPI Chainlit < 2.9.4 Arbitrary File Read via /project/element 7.1 High -
chainlitPyPI Chainlit contains an authorization bypass vulnerability 2.3 Low