gradio-picto-gallery (0.0.8), scraibe-webui (>=0.1.2.dev107, <=0.2.1) +1 more potentially affected by CVE-2026-28414 via gradio (5.5.0)

gradio PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-picto-gallery 0.0.8 - scraibe-webui =0.1.2.dev107, =0.2.1 - tts-webui 0.0.1 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5...

gryannote (>=0.3.1, <=0.3.3), scraibe-webui (0.1.0) potentially affected by CVE-2026-28414 via gradio (4.27.0)

gradio PYPI version 4.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gryannote =0.3.1, =0.3.3 - scraibe-webui 0.1.0 Source cves: CVE-2026-28414 Source advisory: OSV:PYSEC-2026-64...

gryannote (>=0.3.1, <=0.3.3), scraibe-webui (0.1.0) potentially affected by CVE-2026-28415 via gradio (4.27.0)

gradio PYPI version 4.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gryannote =0.3.1, =0.3.3 - scraibe-webui 0.1.0 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...

autobiasdetector (0.0.2), chat-with-mlx (>=0.2.0, <=0.2.2) +6 more potentially affected by CVE-2026-28414 via gradio (4.29.0)

gradio PYPI version 4.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autobiasdetector 0.0.2 - chat-with-mlx =0.2.0, =0.1.1, =0.0.1, =0.0.1, =1.3.0, =1.4.3 Source cves: CVE-2026-28414 Source advisory: OSV:PYSEC-2026-6...

gryannote (>=0.3.1, <=0.3.3), scraibe-webui (0.1.0) potentially affected by CVE-2026-28416 via gradio (4.27.0)

gradio PYPI version 4.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gryannote =0.3.1, =0.3.3 - scraibe-webui 0.1.0 Source cves: CVE-2026-28416 Source advisory: OSV:PYSEC-2026-66...

gradio-picto-gallery (0.0.8), scraibe-webui (>=0.1.2.dev107, <=0.2.1) +1 more potentially affected by CVE-2026-28414 via gradio (5.5.0)

gradio PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-picto-gallery 0.0.8 - scraibe-webui =0.1.2.dev107, =0.2.1 - tts-webui 0.0.1 Source cves: CVE-2026-28414 Source advisory: OSV:PYSEC-2026-64...

gradio-picto-gallery (0.0.8), scraibe-webui (>=0.1.2.dev107, <=0.2.1) +1 more potentially affected by CVE-2026-28415 via gradio (5.5.0)

gradio PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-picto-gallery 0.0.8 - scraibe-webui =0.1.2.dev107, =0.2.1 - tts-webui 0.0.1 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...

gradio-picto-gallery (0.0.8), scraibe-webui (>=0.1.2.dev107, <=0.2.1) +1 more potentially affected by CVE-2026-28416 via gradio (5.5.0)

gradio PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-picto-gallery 0.0.8 - scraibe-webui =0.1.2.dev107, =0.2.1 - tts-webui 0.0.1 Source cves: CVE-2026-28416 Source advisory: OSV:PYSEC-2026-66...

CVE-2026-25136

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. A reflected Cross-site Scripting vulnerability was located in versions prior to 35.8.3, 38.5.4, and 39.3.1 in the rendering of the ExceptionMessa...

CVE-2026-27628 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-25733

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting XSS vulnerability in the Custom Rules function of the WebUI where...

CVE-2026-25138

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Prior to versions 35.8.3, 38.5.4, and 39.3.1, the WebUI login endpoint returns distinct error messages depending on whether a supplied username...

CVE-2026-25736 Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting XSS vulnerability in the Custom RSE Attribute of the WebUI where...

CVE-2026-25736 Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting XSS vulnerability in the Custom RSE Attribute of the WebUI where...

CVE-2026-25735 Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting XSS vulnerability in the Identity Name of the WebUI where...

CVE-2026-25735

Rucio WebUI Identity Name contains a stored XSS vulnerability. Attacker-supplied input is persisted and later rendered without proper output encoding, enabling arbitrary JavaScript execution in the WebUI for affected users. This can potentially lead to session token theft or unauthorized actions....

CVE-2026-25735

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting XSS vulnerability in the Identity Name of the WebUI where...

GHSA-FQ4F-4738-RQXM Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute

Summary A stored Cross-site Scripting XSS vulnerability was identified in the Custom RSE Attribute of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of...

CVE-2026-25734

Rucio WebUI vulnerability CVE-2026-25734: stored XSS in RSE metadata of the WebUI. Attacker-controlled input is persisted by the backend and rendered in the WebUI without proper output encoding, enabling arbitrary JavaScript execution in the user context and potentially session token theft or una...

CVE-2026-25734

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting XSS vulnerability in the RSE metadata of the WebUI where...