Skip to content
OpenAdvisories

Package · PyPI

rucio-webui

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 6.1
    CVE-2026-25736

    Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute

    Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting (XSS) vulnerability in the …

    rucio rucio rucio-webui PyPI
  • Medium 6.1
    CVE-2026-25735

    Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name

    Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting (XSS) vulnerability in the …

    rucio rucio rucio-webui PyPI
  • Medium 6.1
    CVE-2026-25734

    Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata

    Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting (XSS) vulnerability in the …

    rucio rucio rucio-webui PyPI
  • High 7.3
    CVE-2026-25733

    Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function

    Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting (XSS) vulnerability in the …

    rucio rucio rucio-webui PyPI
  • Medium 5.3
    CVE-2026-25138

    Rucio WebUI has Username Enumeration via Login Error Message

    Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Prior to versions 35.8.3, 38.5.4, and 39.3.1, the WebUI login endpoint returns distinct error messages depe…

    rucio rucio rucio-webui PyPI
  • High 8.1
    CVE-2026-25136

    Rucio WebUI has a Reflected Cross-site Scripting Vulnerability

    Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. A reflected Cross-site Scripting vulnerability was located in versions prior to 35.8.3, 38.5.4, and 39.3.1 …

    rucio rucio rucio-webui PyPI
  • High —
    GHSA-v988-828w-xvf2

    Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui

    ### Impact `rucio-webui` installations of the `1.26` release line potentially leak the contents of cookies to other sessions within a wsgi container. Impact is that Rucio authentication tokens are leaked to other users accessing the `webui` within a close tim…

    rucio-webui PyPI