rosys (0.4.9) potentially affected by CVE-2026-27156 via nicegui (0.6.9)

nicegui PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.4.9 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

GHSA-78QV-3MPX-9CQQ NiceGUI vulnerable to XSS via Code Injection during client-side element function execution

Summary Several NiceGUI APIs that execute methods on client-side elements Element.runmethod, AgGrid.rungridmethod, EChart.runchartmethod, and others use an eval fallback in the JavaScript-side runMethod function. When user-controlled input is passed as the method name, an attacker can inject...

rosys (0.3.2) potentially affected by CVE-2026-27156 via nicegui (0.6.1)

nicegui PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.3.2 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

synth-mapping-helper (>=1.5.13, <=1.5.14) potentially affected by CVE-2026-27156 via nicegui (2.18.0)

nicegui PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.5.13, =1.5.14 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

flinventory-gui (>=0.10.0, <=0.11.1), synth-mapping-helper (1.5.11) +1 more potentially affected by CVE-2026-27156 via nicegui (2.12.1)

nicegui PYPI version 2.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - flinventory-gui =0.10.0, =0.2.0, =0.2.11 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

otanalytics (>=0.5.4, <=0.6.14), synth-mapping-helper (1.5.10) potentially affected by CVE-2026-27156 via nicegui (2.11.0)

nicegui PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - otanalytics =0.5.4, =0.6.14 - synth-mapping-helper 1.5.10 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

synth-mapping-helper (>=1.5.3, <=1.5.7) potentially affected by CVE-2026-27156 via nicegui (2.5.0)

nicegui PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.5.3, =1.5.7 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

synth-mapping-helper (1.4.7) potentially affected by CVE-2026-27156 via nicegui (1.4.30)

nicegui PYPI version 1.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.4.7 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

finalynx (>=1.2.0, <=1.14.4) potentially affected by CVE-2026-27156 via nicegui (1.4.25)

nicegui PYPI version 1.4.25 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - finalynx =1.2.0, =1.14.4 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

rosys (>=0.5.18, <=0.5.21) potentially affected by CVE-2026-27156 via nicegui (0.7.27)

nicegui PYPI version 0.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.18, =0.5.21 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

rosys (>=0.5.3, <=0.5.10) potentially affected by CVE-2026-27156 via nicegui (0.7.6)

nicegui PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.3, =0.5.10 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

rosys (>=0.5.1, <=0.5.2) potentially affected by CVE-2026-27156 via nicegui (0.7.2)

nicegui PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.1, =0.5.2 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

relationalai (>=0.11.4, <=0.13.5) potentially affected by CVE-2026-27156 via nicegui (2.16.1)

nicegui PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - relationalai =0.11.4, =0.13.5 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

air-link (>=0.0.0, <=0.2.1), broh5 (1.3.2) +16 more potentially affected by CVE-2026-27156 via nicegui (1.4.37)

nicegui PYPI version 1.4.37 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - air-link =0.0.0, =0.1.0, =1.1.3, =0.6.7, =1.0.0, =1.14.5, =0.0.2a5, =1.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves:...

synth-mapping-helper (>=1.4.8, <=1.5.0) potentially affected by CVE-2026-27156 via nicegui (1.4.36)

nicegui PYPI version 1.4.36 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.4.8, =1.5.0 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

openorchestrator (>=1.1.0, <=1.3.1) potentially affected by CVE-2026-27156 via nicegui (1.4.12)

nicegui PYPI version 1.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openorchestrator =1.1.0, =1.3.1 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

synth-mapping-helper (1.5.9) potentially affected by CVE-2026-27156 via nicegui (2.8.1)

nicegui PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.5.9 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

kayalab (>=0.7.30, <=0.11.9) potentially affected by CVE-2026-27156 via nicegui (1.4.24)

nicegui PYPI version 1.4.24 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - kayalab =0.7.30, =0.11.9 Source cves: CVE-2026-27156 Source advisory: OSV:GHSA-78QV-3MPX-9CQQ...

PYSEC-2026-2232

NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side elements Element.runmethod, AgGrid.rungridmethod, EChart.runchartmethod, and others use an eval fallback in the JavaScript-side runMethod function. When user-controlled input i...

CVE-2026-27156

NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side elements Element.runmethod, AgGrid.rungridmethod, EChart.runchartmethod, and others use an eval fallback in the JavaScript-side runMethod function. When user-controlled input i...