PyPI/nicegui CVE-2026-45553: high 7.5, EPSS 0.43%

NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()

Action: Upgrade nicegui to 3.12.0 or later.

pip install nicegui==3.12.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-2679
• https://github.com/zauberzeug/nicegui/security/advisories/GHSA-jfrm-rx66-g536
• https://nvd.nist.gov/vuln/detail/CVE-2026-45553
• https://github.com/zauberzeug/nicegui
• https://github.com/zauberzeug/nicegui/releases/tag/v3.12.0
• https://pypi.org/project/nicegui
• https://github.com/advisories/GHSA-jfrm-rx66-g536

CVE-2026-45553 · published 2026-07-13T15:19:08.957989Z · modified 2026-07-13T16:32:17.079890952Z · JSON