nicegui vulnerabilities (PyPI)
17 vulnerabilities.
-
niceguiPyPI NiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-component resource routes 5.3 Medium -
niceguiPyPI NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text() 7.5 High -
niceguiPyPI NiceGUI has a Path Traversal in NiceGUI Upload Filename on Windows via Backslash Bypass of PurePosixPath Sanitization 5.9 Medium -
niceguiPyPI NiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustion 6.9 Medium -
niceguiPyPI NiceGUI has XSS via Code Injection 6.1 Medium -
niceguiPyPI NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write 7.5 High -
niceguiPyPI NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content 6.1 Medium -
niceguiPyPI NiceGUI has Redis connection leak via tab storage causes service degradation 5.3 Medium -
niceguiPyPI Zero-click XSS in all NiceGUI apps which uses `ui.sub_pages` 7.2 High -
niceguiPyPI NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links 6.1 Medium -
niceguiPyPI NiceGUI is vulnerable to XSS via Unescaped URL in ui.navigate.history.push() / replace() 6.1 Medium -
niceguiPyPI NiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File Reading 7.5 High -
niceguiPyPI NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content 6.1 Medium -
niceguiPyPI NiceGUI Reflected XSS in ui.add_css, ui.add_scss, and ui.add_sass via Style Injection 6.1 Medium -
niceguiPyPI NiceGUI is vulnerable to Reflected XSS attack 6.1 Medium -
niceguiPyPI NiceGUI On Air authentication issue 7.5 High -
niceguiPyPI Local File Inclusion in NiceGUI leaflet component 8.2 High