Skip to content
OpenAdvisories
Critical · 9.1 CVE-2023-33175 EUVD-2023-1558GHSA-hh7j-pg39-q563PYSEC-2026-555

ToUI allows user-specific variables to be shared between users

Published May 30, 2023 · Updated Jan 10, 2025 · Assigned by GitHub_M

Description

ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use `Website.user_vars` property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1.

Affected products

VendorProductAffectedFixed
mubarakalmehairbi ToUI >= 2.0.1, < 2.4.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI toui >= 2.0.1, < 2.4.1 2.4.1 GHSA-hh7j-pg39-q563

References