rosys (>=0.5.22, <=0.5.24) potentially affected by CVE-2025-66645 via nicegui (0.7.29)

nicegui PYPI version 0.7.29 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.22, =0.5.24 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

flinventory-gui (>=0.10.0, <=0.11.1), synth-mapping-helper (1.5.11) +1 more potentially affected by CVE-2025-66645 via nicegui (2.12.1)

nicegui PYPI version 2.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - flinventory-gui =0.10.0, =0.2.0, =0.2.11 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

mcp-open-client (0.4.27), synth-mapping-helper (>=1.5.16, <=1.5.18) potentially affected by CVE-2025-66645 via nicegui (2.21.1)

nicegui PYPI version 2.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - mcp-open-client 0.4.27 - synth-mapping-helper =1.5.16, =1.5.18 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (>=0.4.10, <=0.4.12) potentially affected by CVE-2025-66645 via nicegui (0.6.10)

nicegui PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.10, =0.4.12 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

finalynx (>=1.2.0, <=1.14.4) potentially affected by CVE-2025-66645 via nicegui (1.4.25)

nicegui PYPI version 1.4.25 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - finalynx =1.2.0, =1.14.4 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

air-link (>=0.0.0, <=0.2.1), broh5 (1.3.2) +16 more potentially affected by CVE-2025-66645 via nicegui (1.4.37)

nicegui PYPI version 1.4.37 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - air-link =0.0.0, =0.1.0, =1.1.3, =0.6.7, =1.0.0, =1.14.5, =0.0.2a5, =1.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves:...

synth-mapping-helper (1.5.12) potentially affected by CVE-2025-66645 via nicegui (2.17.0)

nicegui PYPI version 2.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.5.12 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (>=0.5.14, <=0.5.17) potentially affected by CVE-2025-66645 via nicegui (0.7.21)

nicegui PYPI version 0.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.14, =0.5.17 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

aignostics (>=0.2.200, <=0.2.226), bindmc (>=0.1.3, <=0.1.11) +3 more potentially affected by CVE-2025-66645 via nicegui (>=3.0.0rc1, <=3.3.1)

nicegui PYPI version =3.0.0rc1, =0.2.200, =0.1.3, =0.4.24, =0.4.25 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (0.3.2) potentially affected by CVE-2025-66645 via nicegui (0.6.1)

nicegui PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.3.2 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

aignostics (>=0.2.200, <=0.2.226), bindmc (>=0.1.3, <=0.1.11) +3 more potentially affected by CVE-2025-66645 via nicegui (>=3.0.0rc1, <=3.3.1)

nicegui PYPI version =3.0.0rc1, =0.2.200, =0.1.3, =0.4.24, =0.4.25 Source cves: CVE-2025-66645 Source advisory: SNYK:PYTHON-NICEGUI-14236612...

kayalab (>=0.1.0, <=0.7.29) potentially affected by CVE-2025-66645 via nicegui (1.4.13)

nicegui PYPI version 1.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - kayalab =0.1.0, =0.7.29 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

nice-gui-utils (>=0.1.2.dev0, <=0.1.2.dev3) potentially affected by CVE-2025-66645 via nicegui (1.4.1)

nicegui PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils =0.1.2.dev0, =0.1.2.dev3 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

synth-mapping-helper (>=1.5.1, <=1.5.2) potentially affected by CVE-2025-66645 via nicegui (2.3.0)

nicegui PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.5.1, =1.5.2 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

synth-mapping-helper (>=1.4.8, <=1.5.0) potentially affected by CVE-2025-66645 via nicegui (1.4.36)

nicegui PYPI version 1.4.36 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.4.8, =1.5.0 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

Directory Traversal

Overview nicegui is a Create web-based user interfaces with Python. The nice way. Affected versions of this package are vulnerable to Directory Traversal via the addmediafiles function. An attacker can read arbitrary files on the server filesystem. Details A Directory Traversal attack also known ...

NiceGUI has a path traversal in app.add_media_files() allows arbitrary file read

Summary A directory traversal vulnerability in NiceGUI's App.addmediafiles allows a remote attacker to read arbitrary files on the server filesystem. Details Hello, I am Seungbin Yang, a university student studying cybersecurity. While reviewing the source code of the repository, I discovered a...

haywire-core (0.0.2), openorchestrator (>=2.0.0rc1, <=3.0.0) +1 more potentially affected by CVE-2025-66645 via nicegui (2.22.2)

nicegui PYPI version 2.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - haywire-core 0.0.2 - openorchestrator =2.0.0rc1, =3.0.0 - space-stream 0.1.3 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2025-66645 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...

rosys (0.4.9) potentially affected by CVE-2025-66645 via nicegui (0.6.9)

nicegui PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.4.9 Source cves: CVE-2025-66645 Source advisory: OSV:GHSA-HXP3-63HC-5366...