rosys (>=0.3.0, <=0.3.1) potentially affected by CVE-2025-66645 via nicegui (0.5.9)

nicegui PYPI version 0.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.0, =0.3.1 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

synth-mapping-helper (1.4.7) potentially affected by CVE-2025-66645 via nicegui (1.4.30)

nicegui PYPI version 1.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.4.7 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (>=0.5.11, <=0.5.12) potentially affected by CVE-2025-66645 via nicegui (0.7.10)

nicegui PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.11, =0.5.12 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

GHSA-HXP3-63HC-5366 NiceGUI has a path traversal in app.add_media_files() allows arbitrary file read

Summary A directory traversal vulnerability in NiceGUI's App.addmediafiles allows a remote attacker to read arbitrary files on the server filesystem. Details Hello, I am Seungbin Yang, a university student studying cybersecurity. While reviewing the source code of the repository, I discovered a...

rosys (>=0.8.4, <=0.8.5) potentially affected by CVE-2025-66645 via nicegui (1.2.17)

nicegui PYPI version 1.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.8.4, =0.8.5 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

nice-gui-utils (>=0.1.2, <=0.1.5) potentially affected by CVE-2025-66645 via nicegui (1.4.2)

nicegui PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils =0.1.2, =0.1.5 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

synth-mapping-helper (>=1.5.3, <=1.5.7) potentially affected by CVE-2025-66645 via nicegui (2.5.0)

nicegui PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.5.3, =1.5.7 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

aignostics (>=0.2.200, <=0.2.226), bindmc (>=0.1.3, <=0.1.11) +3 more potentially affected by CVE-2025-66645 via nicegui (>=3.0.0rc1, <=3.3.1)

nicegui PYPI version =3.0.0rc1, =0.2.200, =0.1.3, =0.4.24, =0.4.25 Source cves: CVE-2025-66645 Source advisory: GHSA-HXP3-63HC-5366...

NiceGUI has a path traversal in app.add_media_files() allows arbitrary file read

Summary A directory traversal vulnerability in NiceGUI's App.addmediafiles allows a remote attacker to read arbitrary files on the server filesystem. Details Hello, I am Seungbin Yang, a university student studying cybersecurity. While reviewing the source code of the repository, I discovered a...

rosys (>=0.5.18, <=0.5.21) potentially affected by CVE-2025-66645 via nicegui (0.7.27)

nicegui PYPI version 0.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.18, =0.5.21 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

otanalytics (>=0.5.4, <=0.6.14), synth-mapping-helper (1.5.10) potentially affected by CVE-2025-66645 via nicegui (2.11.0)

nicegui PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - otanalytics =0.5.4, =0.6.14 - synth-mapping-helper 1.5.10 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (>=0.4.13, <=0.5.0) potentially affected by CVE-2025-66645 via nicegui (0.6.12)

nicegui PYPI version 0.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.13, =0.5.0 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

synth-mapping-helper (1.5.15) potentially affected by CVE-2025-66645 via nicegui (2.19.0)

nicegui PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.5.15 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

nice-gui-utils (0.1.6) potentially affected by CVE-2025-66645 via nicegui (1.4.3)

nicegui PYPI version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils 0.1.6 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (0.7.1) potentially affected by CVE-2025-66645 via nicegui (1.0.4)

nicegui PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.7.1 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (>=0.5.1, <=0.5.2) potentially affected by CVE-2025-66645 via nicegui (0.7.2)

nicegui PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.1, =0.5.2 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (0.8.2) potentially affected by CVE-2025-66645 via nicegui (1.2.5)

nicegui PYPI version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.8.2 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

forta-gate (0.1.0), openadapt (>=0.9.0, <=0.16.2) potentially affected by CVE-2025-66645 via nicegui (1.4.7)

nicegui PYPI version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - forta-gate 0.1.0 - openadapt =0.9.0, =0.16.2 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

openadapt (>=0.17.0, <=0.17.1) potentially affected by CVE-2025-66645 via nicegui (1.4.9)

nicegui PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt =0.17.0, =0.17.1 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (0.5.13) potentially affected by CVE-2025-66645 via nicegui (0.7.15)

nicegui PYPI version 0.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.5.13 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...