CVE-2026-25734
2 advisories.
PyPI/rucio-webui CVE-2026-25734: medium 6.1, EPSS 0.53%
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
Action: Upgrade rucio-webui to 35.8.3 or later.
pip install rucio-webui==35.8.3pip install rucio-webui==38.5.4pip install rucio-webui==39.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 35.8.3 | - |
| 36.0.0rc1 | 38.5.4 | - |
| 39.0.0rc1 | 39.3.1 | - |
Fixed versions
| 35.8.3 | 38.5.4 | 39.3.1 |
Sources
- osv: GHSA-h9fp-p2p9-873q
- https://github.com/rucio/rucio/security/advisories/GHSA-h9fp-p2p9-873q
- https://nvd.nist.gov/vuln/detail/CVE-2026-25734
- https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html
- https://github.com/rucio/rucio
- https://github.com/rucio/rucio/releases/tag/35.8.3
- https://github.com/rucio/rucio/releases/tag/38.5.4
- https://github.com/rucio/rucio/releases/tag/39.3.1
CVE-2026-25734 · published · modified · JSON
PyPI/rucio-webui CVE-2026-25734: medium 6.1, EPSS 0.53%
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
Action: Upgrade rucio-webui to 35.8.3 or later.
pip install rucio-webui==35.8.3pip install rucio-webui==38.5.4pip install rucio-webui==39.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 35.8.3 | - |
| 36.0.0rc1 | 38.5.4 | - |
| 39.0.0rc1 | 39.3.1 | - |
Fixed versions
| 35.8.3 | 38.5.4 | 39.3.1 |
Sources
- osv: PYSEC-2026-3057
- https://github.com/rucio/rucio/security/advisories/GHSA-h9fp-p2p9-873q
- https://nvd.nist.gov/vuln/detail/CVE-2026-25734
- https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html
- https://github.com/rucio/rucio
- https://github.com/rucio/rucio/releases/tag/35.8.3
- https://github.com/rucio/rucio/releases/tag/38.5.4
- https://github.com/rucio/rucio/releases/tag/39.3.1
- https://pypi.org/project/rucio-webui
- https://github.com/advisories/GHSA-h9fp-p2p9-873q
CVE-2026-25734 · published · modified · JSON