CVE-2026-25136
2 advisories.
PyPI/rucio-webui CVE-2026-25136: high 8.1
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
Action: Upgrade rucio-webui to 35.8.3 or later.
pip install rucio-webui==35.8.3pip install rucio-webui==38.5.4pip install rucio-webui==39.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 35.8.3 | - |
| 36.0.0rc1 | 38.5.4 | - |
| 39.0.0rc1 | 39.3.1 | - |
Fixed versions
| 35.8.3 | 38.5.4 | 39.3.1 |
Sources
- osv: GHSA-h79m-5jjm-jm4q
- https://github.com/rucio/rucio/security/advisories/GHSA-h79m-5jjm-jm4q
- https://nvd.nist.gov/vuln/detail/CVE-2026-25136
- https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html
- https://github.com/rucio/rucio
- https://github.com/rucio/rucio/releases/tag/35.8.3
- https://github.com/rucio/rucio/releases/tag/38.5.4
- https://github.com/rucio/rucio/releases/tag/39.3.1
CVE-2026-25136 · published · modified · JSON
PyPI/rucio-webui CVE-2026-25136: high 8.1
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
Action: Upgrade rucio-webui to 35.8.3 or later.
pip install rucio-webui==35.8.3pip install rucio-webui==38.5.4pip install rucio-webui==39.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 35.8.3 | - |
| 36.0.0rc1 | 38.5.4 | - |
| 39.0.0rc1 | 39.3.1 | - |
Fixed versions
| 35.8.3 | 38.5.4 | 39.3.1 |
Sources
- osv: PYSEC-2026-3056
- https://github.com/rucio/rucio/security/advisories/GHSA-h79m-5jjm-jm4q
- https://nvd.nist.gov/vuln/detail/CVE-2026-25136
- https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html
- https://github.com/rucio/rucio
- https://github.com/rucio/rucio/releases/tag/35.8.3
- https://github.com/rucio/rucio/releases/tag/38.5.4
- https://github.com/rucio/rucio/releases/tag/39.3.1
- https://pypi.org/project/rucio-webui
- https://github.com/advisories/GHSA-h79m-5jjm-jm4q
CVE-2026-25136 · published · modified · JSON