Skip to content
OpenAdvisories
High · 7.5 CVE-2025-21618 EUVD-2025-0044GHSA-v6jv-p6r8-j78wPYSEC-2026-1705

NiceGUI On Air authentication issue

Published Jan 6, 2025 · Updated Jan 6, 2025 · Assigned by GitHub_M

Description

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1.

Affected products

VendorProductAffectedFixed
zauberzeug nicegui < 2.9.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI nicegui < 2.9.1 2.9.1 GHSA-v6jv-p6r8-j78w

References