kayalab (>=0.7.30, <=0.11.9) potentially affected by CVE-2025-66469 via nicegui (1.4.24)

nicegui PYPI version 1.4.24 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - kayalab =0.7.30, =0.11.9 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

rosys (>=0.5.22, <=0.5.24) potentially affected by CVE-2025-66469 via nicegui (0.7.29)

nicegui PYPI version 0.7.29 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.22, =0.5.24 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

rosys (>=0.5.11, <=0.5.12) potentially affected by CVE-2025-66469 via nicegui (0.7.10)

nicegui PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.11, =0.5.12 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

synth-mapping-helper (>=1.4.8, <=1.5.0) potentially affected by CVE-2025-66469 via nicegui (1.4.36)

nicegui PYPI version 1.4.36 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.4.8, =1.5.0 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

synth-mapping-helper (1.5.15) potentially affected by CVE-2025-66469 via nicegui (2.19.0)

nicegui PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.5.15 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

rosys (>=0.5.18, <=0.5.21) potentially affected by CVE-2025-66469 via nicegui (0.7.27)

nicegui PYPI version 0.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.18, =0.5.21 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

openadapt (0.7.1) potentially affected by CVE-2025-66469 via nicegui (1.2.16)

nicegui PYPI version 1.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt 0.7.1 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

rosys (0.8.2) potentially affected by CVE-2025-66469 via nicegui (1.2.5)

nicegui PYPI version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.8.2 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

aignostics (>=0.2.200, <=0.2.226), bindmc (>=0.1.3, <=0.1.11) +3 more potentially affected by CVE-2025-66469 via nicegui (>=3.0.0rc1, <=3.3.1)

nicegui PYPI version =3.0.0rc1, =0.2.200, =0.1.3, =0.4.24, =0.4.25 Source cves: CVE-2025-66469 Source advisory: GHSA-72QC-WXCH-74MG...

mcp-open-client (0.4.27), synth-mapping-helper (>=1.5.16, <=1.5.18) potentially affected by CVE-2025-66469 via nicegui (2.21.1)

nicegui PYPI version 2.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - mcp-open-client 0.4.27 - synth-mapping-helper =1.5.16, =1.5.18 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

haywire-core (0.0.2), openorchestrator (>=2.0.0rc1, <=3.0.0) +1 more potentially affected by CVE-2025-66469 via nicegui (2.22.2)

nicegui PYPI version 2.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - haywire-core 0.0.2 - openorchestrator =2.0.0rc1, =3.0.0 - space-stream 0.1.3 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

rosys (0.5.13) potentially affected by CVE-2025-66469 via nicegui (0.7.15)

nicegui PYPI version 0.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.5.13 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

openorchestrator (>=1.1.0, <=1.3.1) potentially affected by CVE-2025-66469 via nicegui (1.4.12)

nicegui PYPI version 1.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openorchestrator =1.1.0, =1.3.1 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

otanalytics (>=0.6.15, <=0.7.5), synth-mapping-helper (1.5.19) potentially affected by CVE-2025-66469 via nicegui (2.24.1)

nicegui PYPI version 2.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - otanalytics =0.6.15, =0.7.5 - synth-mapping-helper 1.5.19 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2025-66469 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

aignostics (>=0.2.200, <=0.2.226), bindmc (>=0.1.3, <=0.1.11) +3 more potentially affected by CVE-2025-66469 via nicegui (>=3.0.0rc1, <=3.3.1)

nicegui PYPI version =3.0.0rc1, =0.2.200, =0.1.3, =0.4.24, =0.4.25 Source cves: CVE-2025-66469 Source advisory: SNYK:PYTHON-NICEGUI-14222432...

Cross-site Scripting (XSS)

Overview nicegui is a Create web-based user interfaces with Python. The nice way. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ui.addcss, ui.addscss, and ui.addsass functions. An attacker can execute arbitrary JavaScript in the context of the user's browser...

nice-gui-utils (>=0.1.2.dev0, <=0.1.2.dev3) potentially affected by CVE-2025-66469 via nicegui (1.4.1)

nicegui PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils =0.1.2.dev0, =0.1.2.dev3 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

rosys (>=0.4.10, <=0.4.12) potentially affected by CVE-2025-66469 via nicegui (0.6.10)

nicegui PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.10, =0.4.12 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

rosys (>=0.4.13, <=0.5.0) potentially affected by CVE-2025-66469 via nicegui (0.6.12)

nicegui PYPI version 0.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.13, =0.5.0 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...