Vulnerability in Snowflake Streamlit
CVE-2026-10804
A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access i…
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.001 (0.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.6 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L.
Affected products
- Snowflake Streamlit
- N/a Streamlit — versions 1.0, 1.1, 1.2
Weakness classification (CWE)
References
- cna@vuldb.com (Product, product)
- cna@vuldb.com (issue-tracking, Patch, exploit, Mitigation, Issue Tracking)
- cna@vuldb.com (issue-tracking, Patch, patch, Issue Tracking)
- cna@vuldb.com (VDB Entry, Third Party Advisory, third-party-advisory)
- cna@vuldb.com (VDB Entry, Third Party Advisory, third-party-advisory)
- cna@vuldb.com (VDB Entry, Third Party Advisory, vdb-entry)
- cna@vuldb.com (signature, Permissions Required, permissions-required, VDB Entry)
Frequently asked questions
- What is CVE-2026-10804?
- CVE-2026-10804 is a low-severity vulnerability in Snowflake Streamlit, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 3.6/10. Published 2026-06-04.
- How severe is CVE-2026-10804?
- Low severity. CVSS v3 base score is 3.6 out of 10.