ai-plays-jackbox (>=0.0.1, <=0.3.2), air-link (>=0.3.0, <=0.5.0) +23 more potentially affected by CVE-2025-53354 via nicegui (2.24.2)

nicegui PYPI version 2.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - ai-plays-jackbox =0.0.1, =0.3.0, =0.8.0, =1.11.0b1, =0.13.24, =0.2.14, =0.30.0, =2.0.0, =0.2.0, =0.2.0, =0.0.1, =0.0.4 and more Source cves:...

epicallypowerful (1.0.7) potentially affected by CVE-2025-53354 via nicegui (3.0.0rc1)

nicegui PYPI version 3.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - epicallypowerful 1.0.7 Source cves: CVE-2025-53354 Source advisory: OSV:PYSEC-2026-1699...

PYSEC-2026-1699 NiceGUI has a Reflected XSS

Summary A Cross-Site Scripting XSS risk exists in NiceGUI when developers render unescaped user input into the DOM using ui.html. Before version 3.0, NiceGUI does not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.input with ui.html without...

NiceGUI On Air authentication issue

SummaryOnce a user logins to one browser, all other browsers are logged in without entering password. Even incognito mode. Impacthigh...

rosys (>=0.3.0, <=0.3.1) potentially affected by CVE-2025-21618 via nicegui (0.5.9)

nicegui PYPI version 0.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.0, =0.3.1 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (0.3.2) potentially affected by CVE-2025-21618 via nicegui (0.6.1)

nicegui PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.3.2 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2025-21618 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (0.4.9) potentially affected by CVE-2025-21618 via nicegui (0.6.9)

nicegui PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.4.9 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.4.10, <=0.4.12) potentially affected by CVE-2025-21618 via nicegui (0.6.10)

nicegui PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.10, =0.4.12 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.4.13, <=0.5.0) potentially affected by CVE-2025-21618 via nicegui (0.6.12)

nicegui PYPI version 0.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.13, =0.5.0 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.5.1, <=0.5.2) potentially affected by CVE-2025-21618 via nicegui (0.7.2)

nicegui PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.1, =0.5.2 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.5.3, <=0.5.10) potentially affected by CVE-2025-21618 via nicegui (0.7.6)

nicegui PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.3, =0.5.10 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.5.11, <=0.5.12) potentially affected by CVE-2025-21618 via nicegui (0.7.10)

nicegui PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.11, =0.5.12 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (0.5.13) potentially affected by CVE-2025-21618 via nicegui (0.7.15)

nicegui PYPI version 0.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.5.13 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.5.14, <=0.5.17) potentially affected by CVE-2025-21618 via nicegui (0.7.21)

nicegui PYPI version 0.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.14, =0.5.17 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.5.18, <=0.5.21) potentially affected by CVE-2025-21618 via nicegui (0.7.27)

nicegui PYPI version 0.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.18, =0.5.21 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (>=0.5.22, <=0.5.24) potentially affected by CVE-2025-21618 via nicegui (0.7.29)

nicegui PYPI version 0.7.29 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.22, =0.5.24 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (0.7.1) potentially affected by CVE-2025-21618 via nicegui (1.0.4)

nicegui PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.7.1 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (0.8.2) potentially affected by CVE-2025-21618 via nicegui (1.2.5)

nicegui PYPI version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.8.2 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...

rosys (0.8.3) potentially affected by CVE-2025-21618 via nicegui (1.2.10)

nicegui PYPI version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.8.3 Source cves: CVE-2025-21618 Source advisory: OSV:PYSEC-2026-1705...