rosys (>=0.4.10, <=0.4.12) potentially affected by CVE-2026-25732 via nicegui (0.6.10)

nicegui PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.10, =0.4.12 Source cves: CVE-2026-25732 Source advisory: OSV:PYSEC-2026-95...

rosys (>=0.4.13, <=0.5.0) potentially affected by CVE-2026-25516 via nicegui (0.6.12)

nicegui PYPI version 0.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.13, =0.5.0 Source cves: CVE-2026-25516 Source advisory: OSV:PYSEC-2026-2231...

rosys (>=0.5.1, <=0.5.2) potentially affected by CVE-2026-25516 via nicegui (0.7.2)

nicegui PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.1, =0.5.2 Source cves: CVE-2026-25516 Source advisory: OSV:PYSEC-2026-2231...

rosys (>=0.5.3, <=0.5.10) potentially affected by CVE-2026-25516 via nicegui (0.7.6)

nicegui PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.3, =0.5.10 Source cves: CVE-2026-25516 Source advisory: OSV:PYSEC-2026-2231...

rosys (>=0.5.11, <=0.5.12) potentially affected by CVE-2026-25732 via nicegui (0.7.10)

nicegui PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.11, =0.5.12 Source cves: CVE-2026-25732 Source advisory: OSV:PYSEC-2026-95...

rosys (0.5.13) potentially affected by CVE-2026-25516 via nicegui (0.7.15)

nicegui PYPI version 0.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.5.13 Source cves: CVE-2026-25516 Source advisory: OSV:PYSEC-2026-2231...

rosys (0.5.13) potentially affected by CVE-2026-25732 via nicegui (0.7.15)

nicegui PYPI version 0.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.5.13 Source cves: CVE-2026-25732 Source advisory: OSV:PYSEC-2026-95...

CVE-2026-25516

NiceGUI is a Python-based UI framework. The ui.markdown component uses the markdown2 library to convert markdown content to HTML, which is then rendered via innerHTML. By default, markdown2 allows raw HTML to pass through unchanged. This means that if an application renders user-controlled conten...

CVE-2026-25732

NiceGUI is a Python-based UI framework. Prior to 3.7.0, NiceGUI's FileUpload.name property exposes client-supplied filename metadata without sanitization, enabling path traversal when developers use the pattern UPLOADDIR / file.name. Malicious filenames containing ../ sequences allow attackers to...

PYSEC-2026-2231

NiceGUI is a Python-based UI framework. The ui.markdown component uses the markdown2 library to convert markdown content to HTML, which is then rendered via innerHTML. By default, markdown2 allows raw HTML to pass through unchanged. This means that if an application renders user-controlled conten...

PYSEC-2026-2231

NiceGUI is a Python-based UI framework. The ui.markdown component uses the markdown2 library to convert markdown content to HTML, which is then rendered via innerHTML. By default, markdown2 allows raw HTML to pass through unchanged. This means that if an application renders user-controlled conten...

openadapt (>=0.17.0, <=0.26.2) potentially affected by CVE-2026-25732 via nicegui (1.4.9)

nicegui PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt =0.17.0, =0.26.2 Source cves: CVE-2026-25732 Source advisory: OSV:PYSEC-2026-95...

openadapt (>=0.17.0, <=0.26.2) potentially affected by CVE-2026-25516 via nicegui (1.4.9)

nicegui PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt =0.17.0, =0.26.2 Source cves: CVE-2026-25516 Source advisory: OSV:PYSEC-2026-2231...

rosys (>=0.3.0, <=0.3.1) potentially affected by CVE-2026-25732 via nicegui (0.5.9)

nicegui PYPI version 0.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.0, =0.3.1 Source cves: CVE-2026-25732 Source advisory: OSV:PYSEC-2026-95...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2026-25516 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2026-25516 Source advisory: OSV:PYSEC-2026-2231...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2026-25732 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2026-25732 Source advisory: OSV:PYSEC-2026-95...

rosys (0.4.9) potentially affected by CVE-2026-25516 via nicegui (0.6.9)

nicegui PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.4.9 Source cves: CVE-2026-25516 Source advisory: OSV:PYSEC-2026-2231...

rosys (>=0.3.0, <=0.3.1) potentially affected by CVE-2026-25516 via nicegui (0.5.9)

nicegui PYPI version 0.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.0, =0.3.1 Source cves: CVE-2026-25516 Source advisory: OSV:PYSEC-2026-2231...

rosys (0.3.2) potentially affected by CVE-2026-25516 via nicegui (0.6.1)

nicegui PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.3.2 Source cves: CVE-2026-25516 Source advisory: OSV:PYSEC-2026-2231...

rosys (0.3.2) potentially affected by CVE-2026-25732 via nicegui (0.6.1)

nicegui PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.3.2 Source cves: CVE-2026-25732 Source advisory: OSV:PYSEC-2026-95...