nice-gui-utils (>=0.1.2, <=0.1.5) potentially affected by CVE-2025-21618 via nicegui (1.4.2)

nicegui PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils =0.1.2, =0.1.5 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2025-21618 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

synth-mapping-helper (>=1.5.1, <=1.5.9) potentially affected by CVE-2025-21618 via nicegui (>=2.3.0, <=2.8.1)

nicegui PYPI version =2.3.0, =1.5.1, =1.5.9 Source cves: CVE-2025-21618 Source advisory: GHSA-V6JV-P6R8-J78W...

rosys (0.8.2) potentially affected by CVE-2025-21618 via nicegui (1.2.5)

nicegui PYPI version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.8.2 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

rosys (>=0.5.22, <=0.5.24) potentially affected by CVE-2025-21618 via nicegui (0.7.29)

nicegui PYPI version 0.7.29 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.22, =0.5.24 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

openadapt (>=0.8.0, <=0.8.1) potentially affected by CVE-2025-21618 via nicegui (1.2.24)

nicegui PYPI version 1.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt =0.8.0, =0.8.1 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

openadapt (0.7.1) potentially affected by CVE-2025-21618 via nicegui (1.2.16)

nicegui PYPI version 1.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt 0.7.1 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

rosys (>=0.3.0, <=0.3.1) potentially affected by CVE-2025-21618 via nicegui (0.5.9)

nicegui PYPI version 0.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.0, =0.3.1 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

rosys (>=0.5.14, <=0.5.17) potentially affected by CVE-2025-21618 via nicegui (0.7.21)

nicegui PYPI version 0.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.14, =0.5.17 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

air-link (>=0.0.0, <=0.2.1), broh5 (1.3.2) +16 more potentially affected by CVE-2025-21618 via nicegui (1.4.37)

nicegui PYPI version 1.4.37 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - air-link =0.0.0, =0.1.0, =1.1.3, =0.6.7, =1.0.0, =1.14.5, =0.0.2a5, =1.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves:...

rosys (0.4.9) potentially affected by CVE-2025-21618 via nicegui (0.6.9)

nicegui PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.4.9 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

synth-mapping-helper (>=1.4.8, <=1.5.0) potentially affected by CVE-2025-21618 via nicegui (1.4.36)

nicegui PYPI version 1.4.36 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.4.8, =1.5.0 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

rosys (>=0.5.3, <=0.5.10) potentially affected by CVE-2025-21618 via nicegui (0.7.6)

nicegui PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.3, =0.5.10 Source cves: CVE-2025-21618 Source advisory: OSV:GHSA-V6JV-P6R8-J78W...

air-link (>=0.0.0, <=0.2.1), broh5 (1.3.2) +23 more potentially affected by CVE-2025-21618 via nicegui (>=0.5.9, <=2.8.1)

nicegui PYPI version =0.5.9, =0.0.0, =0.1.0, =1.1.3, =0.6.7, =1.0.0, =1.2.0, =0.0.2a5, =1.1.0, =0.1.0, =0.1.2.dev0, =0.0.1, =0.1.0, =0.1.1 and more Source cves: CVE-2025-21618 Source advisory: MEND:CVE-2025-21618...

CVE-2025-21618

CVE-2025-21618 (NiceGUI) affects NiceGUI (Python UI framework) prior to version 2.9.1. The root cause is improper handling of authentication cookies/session state, causing a login in one browser (including incognito) to persist across all other browsers on the same user account. Impact is unautho...

CVE-2025-21618

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1...

CVE-2025-21618 NiceGUI On Air authentication issue

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1...

CVE-2025-21618 NiceGUI On Air authentication issue

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1...

CVE-2025-21618 NiceGUI On Air authentication issue

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1...

CVE-2025-21618: Improper Authentication

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1...