TI-2024-21104 CVE-2024-32005 · GHSA-mwc7-64wg-pgvj
Local File Inclusion in NiceGUI leaflet component
Priority HIGH 75
NiceGUI is an easy-to-use, Python-based UI framework.
zauberzeug
Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
zauberzeug records in CISA KEVNo zauberzeug vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
17 records
TI-2025-41029 CVE-2025-66645 · GHSA-hxp3-63hc-5366
NiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File Reading
Priority HIGH 72
NiceGUI is a Python-based UI framework.
TI-2025-15578 CVE-2025-21618 · GHSA-v6jv-p6r8-j78w
NiceGUI On Air authentication issue
Priority HIGH 72
NiceGUI is an easy-to-use, Python-based UI framework.
TI-2026-17574 CVE-2026-21873 · GHSA-mhpg-c27v-6mxr
Zero-click XSS in all NiceGUI apps which uses `ui.sub_pages`
Priority HIGH 71
NiceGUI is a Python-based UI framework.
TI-2026-17575 CVE-2026-21874 · GHSA-mp55-g7pj-rvm2
NiceGUI has Redis connection leak via tab storage causes service degradation
Priority MEDIUM 63
NiceGUI is a Python-based UI framework.
TI-2026-17573 CVE-2026-21872 · GHSA-m7j5-rq9j-6jj9
NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links
Priority MEDIUM 60
NiceGUI is a Python-based UI framework.
TI-2026-17572 CVE-2026-21871 · GHSA-7grm-h62g-5m97
NiceGUI is vulnerable to XSS via Unescaped URL in ui.navigate.history.push() / replace()
Priority MEDIUM 60
NiceGUI is a Python-based UI framework.
TI-2025-40897 CVE-2025-66470 · GHSA-2m4f-cg75-76w2
NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content
Priority MEDIUM 60
NiceGUI is a Python-based UI framework.
TI-2025-40896 CVE-2025-66469 · GHSA-72qc-wxch-74mg
NiceGUI Reflected XSS in ui.add_css, ui.add_scss, and ui.add_sass via Style Injection
Priority MEDIUM 60
NiceGUI is a Python-based UI framework.
TI-2025-33319 CVE-2025-53354 · GHSA-8c95-hpq2-w46f
NiceGUI is vulnerable to Reflected XSS attack
Priority MEDIUM 60
NiceGUI is a Python-based UI framework.
TI-2026-20800 CVE-2026-25732 · GHSA-9ffm-fxg3-xrhh
NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write
Priority MEDIUM 45
NiceGUI is a Python-based UI framework.
TI-2026-33302 CVE-2026-45553 · GHSA-jfrm-rx66-g536
NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()
Priority LOW 38
NiceGUI is a Python-based UI framework.
TI-2026-25742 CVE-2026-33332 · GHSA-w5g8-5849-vj76
NiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustion
Priority LOW 37
NiceGUI is a Python-based UI framework.
TI-2026-28726 CVE-2026-39844 · GHSA-w8wv-vfpc-hw2w
NiceGUI has a Path Traversal in NiceGUI Upload Filename on Windows via Backslash Bypass of PurePosixPath Sanitization
Priority LOW 33
NiceGUI is a Python-based UI framework.
TI-2026-33303 CVE-2026-45554 · GHSA-pq7c-x8g4-rvp6
NiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-component resource routes
Priority LOW 30
NiceGUI is a Python-based UI framework.
TI-2026-21605 CVE-2026-27156 · GHSA-78qv-3mpx-9cqq
NiceGUI has XSS via Code Injection
Priority LOW 27
NiceGUI is a Python-based UI framework.
TI-2026-20625 CVE-2026-25516 · GHSA-v82v-c5x8-w282
NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content
Priority LOW 27
NiceGUI is a Python-based UI framework.