Skip to content
OpenAdvisories

Package · PyPI

rucio-webui

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.3
    CVE-2026-25733

    Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function

    Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting (XSS) vulnerability in the …

    rucio rucio rucio-webui PyPI
  • High 8.1
    CVE-2026-25136

    Rucio WebUI has a Reflected Cross-site Scripting Vulnerability

    Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. A reflected Cross-site Scripting vulnerability was located in versions prior to 35.8.3, 38.5.4, and 39.3.1 …

    rucio rucio rucio-webui PyPI
  • High —
    GHSA-v988-828w-xvf2

    Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui

    ### Impact `rucio-webui` installations of the `1.26` release line potentially leak the contents of cookies to other sessions within a wsgi container. Impact is that Rucio authentication tokens are leaked to other users accessing the `webui` within a close tim…

    rucio-webui PyPI