EUVD-2022-3401

Malicious code in bioql PyPI...

EUVD-2021-7792

Malicious code in bioql PyPI...

EUVD-2022-25082

Malicious code in bioql PyPI...

EUVD-2022-35957

Malicious code in bioql PyPI...

EUVD-2022-34569

Malicious code in bioql PyPI...

EUVD-2022-52442

Malicious code in bioql PyPI...

EUVD-2022-7362

Malicious code in bioql PyPI...

EUVD-2024-43403

Malicious code in bioql PyPI...

EUVD-2022-35850

Malicious code in bioql PyPI...

EUVD-2021-7911

Malicious code in bioql PyPI...

EUVD-2025-11884

Malicious code in bioql PyPI...

EUVD-2025-19598

Malicious code in bioql PyPI...

EUVD-2021-7783

Malicious code in bioql PyPI...

EUVD-2022-25943

Malicious code in bioql PyPI...

EUVD-2024-36606

Malicious code in bioql PyPI...

CVE-2025-53354 NiceGUI is vulnerable to Reflected XSS attack

NiceGUI is a Python-based UI framework. Versions 2.24.2 and below are at risk for Cross-Site Scripting XSS when developers render unescaped user input into the DOM using ui.html. NiceGUI did not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.inpu...

CVE-2025-53354 NiceGUI is vulnerable to Reflected XSS attack

NiceGUI is a Python-based UI framework. Versions 2.24.2 and below are at risk for Cross-Site Scripting XSS when developers render unescaped user input into the DOM using ui.html. NiceGUI did not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.inpu...

Cross-site Scripting (XSS)

Overview nicegui is a Create web-based user interfaces with Python. The nice way. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ui.html or ui.chatmessage functions when unescaped user input is rendered directly into the DOM. An attacker can execute arbitrary...

GHSA-8C95-HPQ2-W46F NiceGUI has a Reflected XSS

Summary A Cross-Site Scripting XSS risk exists in NiceGUI when developers render unescaped user input into the DOM using ui.html. Before version 3.0, NiceGUI does not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.input with ui.html without...

SUSE CVE-2025-54286

Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication...