# label-studio (PyPI) vulnerabilities 11 known vulnerabilities (1 critical, 5 high, 4 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 1.23.2 (Sep 29, 2026): no advisory with comparable ranges affects it; 1 advisory (CVE-2024-26152) can't be checked against versions - Newest unaffected release: 1.23.2 (Sep 29, 2026), the latest release, not counting 1 advisory without comparable ranges - Weekly downloads: 9,224 - Dependents: 2 - Releases: 100 since 0.4.1 (Jan 10, 2020) - Registry: https://pypi.org/project/label-studio/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-22033: 0.4.1 to 1.22.0 (1.23.0 is outside it) - CVE-2025-47783: 0.4.1 to 1.17.0 (1.18.0 is outside it) - CVE-2025-25297: 0.4.1 to 1.15.0 (1.16.0 is outside it) - CVE-2025-25296: 0.4.1 to 1.15.0 (1.16.0 is outside it) - CVE-2024-26152: its ranges can't be placed on these versions - CVE-2023-47116: 0.4.1 to 1.10.1 (1.11.0 is outside it) - CVE-2024-23633: 0.4.1 to 1.10.0.post0 (1.10.1 is outside it) - CVE-2023-47115: 0.4.1 to 1.9.1.post0 (1.9.2 is outside it) - CVE-2023-47117: 0.4.1 to 1.9.2 (1.9.2.post0 is outside it) - CVE-2023-43791: 0.4.1 to 1.8.1 (1.8.2 is outside it) - CVE-2022-36551: 0.4.1 to 1.5.0.post0 (1.6.0 is outside it) ## Advisories (11) ### [CVE-2026-22033](https://cve.now/CVE-2026-22033): Label Studio vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom\_hotkeys field - Severity: High 8.6 - Published: Jan 12, 2026 - Affected: through 1.22.0. - Fixed in 1.23.0 (released Mar 13, 2026, 60 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 1.23.2, is not affected. ### [CVE-2025-47783](https://cve.now/CVE-2025-47783): label-studio vulnerable to Cross-Site Scripting (Reflected) via the label\_config parameter. - Severity: High 7.6 - Published: May 14, 2025 - Affected: fixed in 1.18.0. - Fixed in 1.18.0 (released May 14, 2025, the day of disclosure). - The latest release, 1.23.2, is not affected. ### [CVE-2025-25297](https://cve.now/CVE-2025-25297): Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint - Severity: High 8.6 - Published: Feb 14, 2025 - Affected: fixed in 1.16.0. - Fixed in 1.16.0 (released Feb 13, 2025, 1 day before disclosure). - The latest release, 1.23.2, is not affected. ### [CVE-2025-25296](https://cve.now/CVE-2025-25296): Label Studio allows Cross-Site Scripting (XSS) via GET request to \`/projects/upload-example\` endpoint - Severity: Medium 6.1 - Published: Feb 14, 2025 - Affected: fixed in 1.16.0. - Fixed in 1.16.0 (released Feb 13, 2025, 1 day before disclosure). - The latest release, 1.23.2, is not affected. ### [CVE-2024-26152](https://cve.now/CVE-2024-26152): Label Studio vulnerable to Cross-site Scripting if \`\\` or \`\\` are used in labeling config - Severity: Medium 4.7 - Published: Feb 22, 2024 - Affected: fixed in 1.11.0; fixed in 1.11.0. ### [CVE-2023-47116](https://cve.now/CVE-2023-47116): Label Studio SSRF on Import Bypassing \`SSRF\_PROTECTION\_ENABLED\` Protections - Severity: Medium 5.3 - Published: Jan 31, 2024 - Affected: fixed in 1.11.0. - Fixed in 1.11.0 (released Jan 30, 2024, 1 day before disclosure). - The latest release, 1.23.2, is not affected. ### [CVE-2024-23633](https://cve.now/CVE-2024-23633): Label Studio XSS Vulnerability on Data Import - Severity: Medium 4.7 - Published: Jan 23, 2024 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jan 4, 2024, 19 days before disclosure). - The latest release, 1.23.2, is not affected. ### [CVE-2023-47115](https://cve.now/CVE-2023-47115): Label Studio XSS Vulnerability on Avatar Upload - Severity: High 7.1 - Published: Jan 23, 2024 - Affected: fixed in 1.9.2. - Fixed in 1.9.2 (released Nov 7, 2023, 77 days before disclosure). - The latest release, 1.23.2, is not affected. ### [CVE-2023-47117](https://cve.now/CVE-2023-47117): Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studio - Severity: High 7.5 - Published: Nov 13, 2023 - Affected: fixed in 1.9.2; fixed in 1.9.2.post0. - Fixed in 1.9.2.post0 (released Nov 8, 2023, 5 days before disclosure). - The latest release, 1.23.2, is not affected. ### [CVE-2023-43791](https://cve.now/CVE-2023-43791): Label Studio has Hardcoded Django \`SECRET\_KEY\` that can be Abused to Forge Session Tokens - Severity: Critical 9.8 - Published: Nov 9, 2023 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Aug 29, 2023, 72 days before disclosure). - The latest release, 1.23.2, is not affected. ### [CVE-2022-36551](https://cve.now/CVE-2022-36551): A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier… - Severity: Unrated - Published: Oct 3, 2022 - Affected: fixed in 1.6.0; fixed in 1.5.0.post0. - Fixed in 1.6.0 (released Sep 27, 2022, 6 days before disclosure). - The latest release, 1.23.2, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/label-studio Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.