CVE-2026-45553

creationtimestamp| type| source ---|---|--- 2026-06-02 17:39:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnd56y2qil2t 2026-06-02 19:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndbr5fszz2f...

CVE-2026-45553

NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructuredtext renders reStructuredText server-side with Docutils without disabling file insertion directives. When a NiceGUI application passes attacker-controlled content to ui.restructuredtext, an attacker can use standard...

PT-2026-41235

Name of the Vulnerable Software and Affected Versions NiceGUI affected versions not specified Description The ui.restructured text function renders reStructuredText server-side using Docutils without disabling file insertion directives. When attacker-controlled content is passed to this function,...