openorchestrator (>=1.1.0, <=1.3.1) potentially affected by CVE-2026-25732 via nicegui (1.4.12)

nicegui PYPI version 1.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openorchestrator =1.1.0, =1.3.1 Source cves: CVE-2026-25732 Source advisory: OSV:GHSA-9FFM-FXG3-XRHH...

synth-mapping-helper (>=1.4.8, <=1.5.0) potentially affected by CVE-2026-25732 via nicegui (1.4.36)

nicegui PYPI version 1.4.36 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.4.8, =1.5.0 Source cves: CVE-2026-25732 Source advisory: OSV:GHSA-9FFM-FXG3-XRHH...

rosys (0.7.1) potentially affected by CVE-2026-25732 via nicegui (1.0.4)

nicegui PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.7.1 Source cves: CVE-2026-25732 Source advisory: OSV:GHSA-9FFM-FXG3-XRHH...

openadapt (>=0.17.0, <=0.17.1) potentially affected by CVE-2026-25732 via nicegui (1.4.9)

nicegui PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - openadapt =0.17.0, =0.17.1 Source cves: CVE-2026-25732 Source advisory: OSV:GHSA-9FFM-FXG3-XRHH...

kayalab (>=0.7.30, <=0.11.9) potentially affected by CVE-2026-25516 via nicegui (1.4.24)

nicegui PYPI version 1.4.24 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - kayalab =0.7.30, =0.11.9 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

aignostics (>=0.2.200, <=0.2.226), bindmc (>=0.1.3, <=0.1.11) +6 more potentially affected by CVE-2026-25516 via nicegui (>=3.0.0rc1, <=3.6.1)

nicegui PYPI version =3.0.0rc1, =0.2.200, =0.1.3, =0.9.0, =0.3.1, =0.4.24, =0.4.25 - relationalai 0.13.6 - synth-mapping-helper 1.5.20 Source cves: CVE-2026-25516 Source advisory: SNYK:PYTHON-NICEGUI-15248174...

air-link (>=0.0.0, <=0.2.1), broh5 (1.3.2) +16 more potentially affected by CVE-2026-25516 via nicegui (1.4.37)

nicegui PYPI version 1.4.37 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - air-link =0.0.0, =0.1.0, =1.1.3, =0.6.7, =1.0.0, =1.14.5, =0.0.2a5, =1.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves:...

GHSA-V82V-C5X8-W282 NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content

Description The ui.markdown component uses the markdown2 library to convert markdown content to HTML, which is then rendered via innerHTML. By default, markdown2 allows raw HTML to pass through unchanged. This means that if an application renders user-controlled content through ui.markdown, an...

Cross-site Scripting (XSS)

Overview nicegui is a Create web-based user interfaces with Python. The nice way. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ui.markdown function. An attacker can execute arbitrary JavaScript in the context of the user's browser by injecting malicious HTM...

rosys (0.8.2) potentially affected by CVE-2026-25516 via nicegui (1.2.5)

nicegui PYPI version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.8.2 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (0.7.1) potentially affected by CVE-2026-25516 via nicegui (1.0.4)

nicegui PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.7.1 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (>=0.3.0, <=0.3.1) potentially affected by CVE-2026-25516 via nicegui (0.5.9)

nicegui PYPI version 0.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.0, =0.3.1 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (0.3.2) potentially affected by CVE-2026-25516 via nicegui (0.6.1)

nicegui PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.3.2 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2026-25516 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (0.4.9) potentially affected by CVE-2026-25516 via nicegui (0.6.9)

nicegui PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys 0.4.9 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (>=0.4.10, <=0.4.12) potentially affected by CVE-2026-25516 via nicegui (0.6.10)

nicegui PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.10, =0.4.12 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (>=0.4.13, <=0.5.0) potentially affected by CVE-2026-25516 via nicegui (0.6.12)

nicegui PYPI version 0.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.13, =0.5.0 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (>=0.5.1, <=0.5.2) potentially affected by CVE-2026-25516 via nicegui (0.7.2)

nicegui PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.1, =0.5.2 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (>=0.5.3, <=0.5.10) potentially affected by CVE-2026-25516 via nicegui (0.7.6)

nicegui PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.3, =0.5.10 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...

rosys (>=0.5.11, <=0.5.12) potentially affected by CVE-2026-25516 via nicegui (0.7.10)

nicegui PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.5.11, =0.5.12 Source cves: CVE-2026-25516 Source advisory: OSV:GHSA-V82V-C5X8-W282...