Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/18 8:21 p.m.18 views

NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()

Summary ui.restructuredtext renders reStructuredText server-side with Docutils without disabling file insertion directives. When a NiceGUI application passes attacker-controlled content to ui.restructuredtext, an attacker can use standard Docutils directives include, csv-table with :file:, raw wi...

7.5CVSS5.9AI score0.00255EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder