openadapt (>=0.17.0, <=0.26.2) potentially affected by CVE-2026-27156 via nicegui (1.4.9)

nicegui PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt =0.17.0, =0.26.2 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

air-link (>=0.0.0, <=0.2.1), broh5 (1.3.2) +16 more potentially affected by CVE-2026-27156 via nicegui (1.4.37)

nicegui PYPI version 1.4.37 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - air-link =0.0.0, =0.1.0, =1.1.3, =0.6.7, =1.0.0, =1.14.5, =0.0.2a5, =1.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves:...

rosys (0.8.2) potentially affected by CVE-2026-27156 via nicegui (1.2.5)

nicegui PYPI version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.8.2 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (>=0.4.13, <=0.5.0) potentially affected by CVE-2026-27156 via nicegui (0.6.12)

nicegui PYPI version 0.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.13, =0.5.0 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (0.4.9) potentially affected by CVE-2026-27156 via nicegui (0.6.9)

nicegui PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.4.9 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (>=0.5.14, <=0.5.17) potentially affected by CVE-2026-27156 via nicegui (0.7.21)

nicegui PYPI version 0.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.14, =0.5.17 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (0.5.13) potentially affected by CVE-2026-27156 via nicegui (0.7.15)

nicegui PYPI version 0.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.5.13 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (>=0.5.11, <=0.5.12) potentially affected by CVE-2026-27156 via nicegui (0.7.10)

nicegui PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.11, =0.5.12 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (>=0.5.1, <=0.5.2) potentially affected by CVE-2026-27156 via nicegui (0.7.2)

nicegui PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.1, =0.5.2 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (>=0.3.0, <=0.3.1) potentially affected by CVE-2026-27156 via nicegui (0.5.9)

nicegui PYPI version 0.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.0, =0.3.1 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

PYSEC-2026-2232

NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side elements Element.runmethod, AgGrid.rungridmethod, EChart.runchartmethod, and others use an eval fallback in the JavaScript-side runMethod function. When user-controlled input i...

rosys (>=0.5.18, <=0.5.21) potentially affected by CVE-2026-27156 via nicegui (0.7.27)

nicegui PYPI version 0.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.18, =0.5.21 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (>=0.4.10, <=0.4.12) potentially affected by CVE-2026-27156 via nicegui (0.6.10)

nicegui PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.10, =0.4.12 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (0.7.1) potentially affected by CVE-2026-27156 via nicegui (1.0.4)

nicegui PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.7.1 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (>=0.5.22, <=0.5.24) potentially affected by CVE-2026-27156 via nicegui (0.7.29)

nicegui PYPI version 0.7.29 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.22, =0.5.24 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (>=0.5.3, <=0.5.10) potentially affected by CVE-2026-27156 via nicegui (0.7.6)

nicegui PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.3, =0.5.10 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2026-27156 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

rosys (0.3.2) potentially affected by CVE-2026-27156 via nicegui (0.6.1)

nicegui PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.3.2 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...

ai-plays-jackbox (>=0.0.1, <=0.3.2), air-link (>=0.3.0, <=0.5.0) +23 more potentially affected by CVE-2026-27156 via nicegui (2.24.2)

nicegui PYPI version 2.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - ai-plays-jackbox =0.0.1, =0.3.0, =0.8.0, =1.11.0b1, =0.13.24, =0.2.14, =0.30.0, =2.0.0, =0.2.0, =0.2.0, =0.0.1, =0.0.4 and more Source cves:...

haywire-core (0.0.2), openorchestrator (>=2.0.0rc1, <=3.0.0) +1 more potentially affected by CVE-2026-27156 via nicegui (2.22.2)

nicegui PYPI version 2.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - haywire-core 0.0.2 - openorchestrator =2.0.0rc1, =3.0.0 - space-stream 0.1.3 Source cves: CVE-2026-27156 Source advisory: OSV:PYSEC-2026-2232...