ai-plays-jackbox (>=0.0.1, <=0.3.2), air-link (>=0.3.0, <=0.5.0) +23 more potentially affected by CVE-2026-45553 via nicegui (2.24.2)

nicegui PYPI version 2.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - ai-plays-jackbox =0.0.1, =0.3.0, =0.8.0, =1.11.0b1, =0.13.24, =0.2.14, =0.30.0, =2.0.0, =0.2.0, =0.2.0, =0.0.1, =0.0.4 and more Source cves:...

rosys (>=0.5.14, <=0.5.17) potentially affected by CVE-2026-45553 via nicegui (0.7.21)

nicegui PYPI version 0.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.14, =0.5.17 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

nice-gui-utils (>=0.1.2, <=0.1.5) potentially affected by CVE-2026-45553 via nicegui (1.4.2)

nicegui PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils =0.1.2, =0.1.5 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

rosys (>=0.4.10, <=0.4.12) potentially affected by CVE-2026-45553 via nicegui (0.6.10)

nicegui PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.10, =0.4.12 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

nice-gui-utils (>=0.1.2.dev0, <=0.1.2.dev3) potentially affected by CVE-2026-45553 via nicegui (1.4.1)

nicegui PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils =0.1.2.dev0, =0.1.2.dev3 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

openadapt (>=0.8.0, <=0.8.1) potentially affected by CVE-2026-45553 via nicegui (1.2.24)

nicegui PYPI version 1.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt =0.8.0, =0.8.1 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

rosys (>=0.8.4, <=0.8.5) potentially affected by CVE-2026-45553 via nicegui (1.2.17)

nicegui PYPI version 1.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.8.4, =0.8.5 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

synth-mapping-helper (1.5.15) potentially affected by CVE-2026-45553 via nicegui (2.19.0)

nicegui PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.5.15 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

synth-mapping-helper (>=1.5.13, <=1.5.14) potentially affected by CVE-2026-45553 via nicegui (2.18.0)

nicegui PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.5.13, =1.5.14 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

openadapt (>=0.17.0, <=0.17.1) potentially affected by CVE-2026-45553 via nicegui (1.4.9)

nicegui PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt =0.17.0, =0.17.1 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

air-link (>=0.0.0, <=0.2.1), broh5 (1.3.2) +16 more potentially affected by CVE-2026-45553 via nicegui (1.4.37)

nicegui PYPI version 1.4.37 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - air-link =0.0.0, =0.1.0, =1.1.3, =0.6.7, =1.0.0, =1.14.5, =0.0.2a5, =1.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves:...

openorchestrator (>=1.1.0, <=1.3.1) potentially affected by CVE-2026-45553 via nicegui (1.4.12)

nicegui PYPI version 1.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openorchestrator =1.1.0, =1.3.1 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

synth-mapping-helper (>=1.4.8, <=1.5.0) potentially affected by CVE-2026-45553 via nicegui (1.4.36)

nicegui PYPI version 1.4.36 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.4.8, =1.5.0 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

kayalab (>=0.7.30, <=0.11.9) potentially affected by CVE-2026-45553 via nicegui (1.4.24)

nicegui PYPI version 1.4.24 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - kayalab =0.7.30, =0.11.9 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

relationalai (>=0.11.4, <=0.13.5) potentially affected by CVE-2026-45553 via nicegui (2.16.1)

nicegui PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - relationalai =0.11.4, =0.13.5 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

CVE-2026-45553

creationtimestamp| type| source ---|---|--- 2026-06-02 17:39:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnd56y2qil2t 2026-06-02 19:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndbr5fszz2f...

CVE-2026-45553

NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructuredtext renders reStructuredText server-side with Docutils without disabling file insertion directives. When a NiceGUI application passes attacker-controlled content to ui.restructuredtext, an attacker can use standard...

rosys (>=0.4.13, <=0.5.0) potentially affected by CVE-2026-45553 via nicegui (0.6.12)

nicegui PYPI version 0.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.13, =0.5.0 Source cves: CVE-2026-45553 Source advisory: OSV:GHSA-JFRM-RX66-G536...

relationalai (>=0.11.4, <=0.13.5) potentially affected by CVE-2026-45553 via nicegui (2.16.1)

nicegui PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - relationalai =0.11.4, =0.13.5 Source cves: CVE-2026-45553 Source advisory: OSV:GHSA-JFRM-RX66-G536...

synth-mapping-helper (1.5.12) potentially affected by CVE-2026-45553 via nicegui (2.17.0)

nicegui PYPI version 2.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.5.12 Source cves: CVE-2026-45553 Source advisory: OSV:GHSA-JFRM-RX66-G536...