nicegui vulnerabilities — 34 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
5.3 medium CVE-2026-45554: NiceGUI Unauthenticated Log-Volume Denial of Service Vulnerability nicegui PyPI 13 Jul 2026 3.12.0
7.5 high CVE-2026-45553: NiceGUI Local File Disclosure via Docutils File Insertion nicegui PyPI 13 Jul 2026 3.12.0
6.1 medium CVE-2026-21872: NiceGUI XSS Vulnerability via Arbitrary Link Rendering nicegui PyPI 07 Jul 2026 3.5.0
6.1 medium CVE-2026-21871: NiceGUI XSS Vulnerability via Unescaped URL in History API Methods nicegui PyPI 07 Jul 2026 3.5.0
7.2 high CVE-2026-21873: NiceGUI Zero-Click XSS Vulnerability in ui.sub_pages nicegui PyPI 07 Jul 2026 3.5.0
5.3 medium CVE-2026-21874: NiceGUI Redis Connection Leak Leading to Service Degradation nicegui PyPI 07 Jul 2026 3.5.0
7.5 high CVE-2025-66645: NiceGUI Path Traversal Vulnerability Allows Arbitrary File Read nicegui PyPI 07 Jul 2026 3.4.0
6.1 medium CVE-2025-66470: NiceGUI Stored/Reflected XSS Vulnerability in ui.interactive_image Component nicegui PyPI 07 Jul 2026 3.4.0
6.1 medium CVE-2025-66469: NiceGUI Reflected XSS via Style Injection in Dynamic Theming nicegui PyPI 07 Jul 2026 3.4.0
6.1 medium CVE-2025-53354: NiceGUI Reflected XSS Vulnerability nicegui PyPI 07 Jul 2026 3.0.0
7.5 high CVE-2025-21618: NiceGUI On Air Authentication Bypass Vulnerability nicegui PyPI 07 Jul 2026 2.9.1
8.2 high CVE-2024-32005: NiceGUI Local File System Access Vulnerability nicegui PyPI 07 Jul 2026 1.4.21
5.3 medium CVE-2026-45554: NiceGUI Unauthenticated Log-Volume Denial of Service Vulnerability nicegui PyPI 18 May 2026 3.12.0
7.5 high CVE-2026-45553: NiceGUI Local File Disclosure via Docutils File Insertion nicegui PyPI 18 May 2026 3.12.0
7.5 high CVE-2026-39844: NiceGUI Arbitrary File Write Vulnerability on Windows nicegui PyPI 08 Apr 2026 3.10.0
5.9 medium CVE-2026-39844: NiceGUI Path Traversal Vulnerability via Filename Sanitization Bypass nicegui PyPI 08 Apr 2026 3.10.0
7.5 high CVE-2026-33332: NiceGUI Memory Consumption Vulnerability in Media File Handling nicegui PyPI 24 Mar 2026 3.9.0
5.3 medium CVE-2026-33332: NiceGUI Media Routes Vulnerability Leading to Memory Exhaustion nicegui PyPI 19 Mar 2026 3.9.0
6.1 high CVE-2026-27156: NiceGUI XSS Vulnerability via Code Injection in Client-Side Element Functions nicegui PyPI 24 Feb 2026 3.8.0
6.1 medium CVE-2026-27156: NiceGUI Arbitrary JavaScript Execution Vulnerability nicegui PyPI 24 Feb 2026 3.8.0
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.