PyPI/nicegui CVE-2024-32005: high 8.2, EPSS 0.76%
NiceGUI allows potential access to local file system
Action: Upgrade nicegui to 1.4.21 or later.
pip install nicegui==1.4.21Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.6 | 1.4.21 | - |
Fixed versions
| 1.4.21 |
Sources
- osv: GHSA-mwc7-64wg-pgvj
- https://github.com/zauberzeug/nicegui/security/advisories/GHSA-mwc7-64wg-pgvj
- https://nvd.nist.gov/vuln/detail/CVE-2024-32005
- https://github.com/zauberzeug/nicegui/commit/ed12eb14f2a6c48b388a05c04b3c5a107ea9d330
- https://github.com/zauberzeug/nicegui
- https://huntr.com/bounties/29ec621a-bd69-4225-ab0f-5bb8a1d10c67
CVE-2024-32005 · published · modified · JSON