Zzauberzeug

Products

Exploited and recent CVEs

• CVE-2026-45554 Medium 5.3 NiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-component resource routes 0.3%
• CVE-2026-45553 High 7.5 NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text() 0.3%
• CVE-2026-39844 Medium 5.9 NiceGUI has a Path Traversal in NiceGUI Upload Filename on Windows via Backslash Bypass of PurePosixPath Sanitization 0.4%
• CVE-2026-33332 Medium 6.9 NiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustion 0.6%
• CVE-2026-27156 Medium 6.1 NiceGUI has XSS via Code Injection 0.2%
• CVE-2026-25516 Medium 6.1 NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content 0.3%
• CVE-2026-25732 High 7.5 NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write 3.4%
• CVE-2026-21874 Medium 5.3 NiceGUI has Redis connection leak via tab storage causes service degradation 0.6%
• CVE-2026-21873 High 7.2 Zero-click XSS in all NiceGUI apps which uses `ui.sub_pages` 0.3%
• CVE-2026-21872 Medium 6.1 NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links 0.3%
• CVE-2026-21871 Medium 6.1 NiceGUI is vulnerable to XSS via Unescaped URL in ui.navigate.history.push() / replace() 0.3%
• CVE-2025-66645 High 7.5 NiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File Reading 1.1%
• CVE-2025-66470 Medium 6.1 NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content 0.3%
• CVE-2025-66469 Medium 6.1 NiceGUI Reflected XSS in ui.add_css, ui.add_scss, and ui.add_sass via Style Injection 0.3%
• CVE-2025-53354 Medium 6.1 NiceGUI is vulnerable to Reflected XSS attack 0.2%
• CVE-2025-21618 High 7.5 NiceGUI On Air authentication issue 0.4%
• CVE-2024-32005 High 8.2 Local File Inclusion in NiceGUI leaflet component 0.8%