CVE-2021-43798

CVE-2021-43798 - Grafana Arbitrary File Read Python toolkit for authorized testing of CVE-2021-43798, a Grafana path traversal vulnerability that can allow unauthenticated arbitrary file reads through plugin asset paths. This repository contains: grafanapoc.py: interactive arbitrary file read PoC...

EUVD-2026-33965

NiceGUI is a Python-based UI framework. Prior to version 3.12.0, two FastAPI routes that serve per-component static assets in NiceGUI accept a sub-path parameter that may resolve to a directory rather than a file. Requests that resolve to a directory raise an unhandled RuntimeError inside...

CVE-2026-45554

NiceGUI is a Python UI framework. Before version 3.12.0, two FastAPI routes serving per-component static assets accept a sub-path that can resolve to a directory, causing an unhandled RuntimeError inside Starlette’s FileResponse. Uvicorn logs the full traceback, and since these routes require no ...