Skip to content
OpenAdvisories

Package · PyPI

nicegui

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2025-66470 Public exploit

    NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content

    NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are subject to a XSS vulnerability through the ui.interactive_image component of NiceGUI. The component renders SVG content using Vue's v-html directive without any sanitization. This allows att…

    zauberzeug nicegui nicegui PyPI