{"api_version":"v1","generated_at":"2026-10-09T08:10:00+00:00","product":{"cve_count":17,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-zauberzeug-nicegui-7f98156d2b82","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/nicegui","name":"nicegui","next_cursor":null,"observations":[{"affected":"< 3.12.0","affected_versions_present":true,"cve_id":"CVE-2026-45554","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45554","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-02T18:03:46.033Z","patch_url":"","primary_source":"","published":"2026-06-02T15:35:07.125Z"},{"affected":"< 3.12.0","affected_versions_present":true,"cve_id":"CVE-2026-45553","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45553","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-03T13:49:28.209Z","patch_url":"","primary_source":"","published":"2026-06-02T15:34:39.897Z"},{"affected":"< 3.10.0","affected_versions_present":true,"cve_id":"CVE-2026-39844","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39844","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-09T16:17:11.748Z","patch_url":"https://github.com/zauberzeug/nicegui/commit/d38a702e3af2da5b0708f689be8d71413fc77056","primary_source":"","published":"2026-04-08T20:13:31.935Z"},{"affected":"< 3.9.0","affected_versions_present":true,"cve_id":"CVE-2026-33332","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33332","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-25T16:19:18.462Z","patch_url":"https://github.com/zauberzeug/nicegui/commit/9026962b8c4f3f225c98b2fbc35aa6b60cb3495b","primary_source":"","published":"2026-03-24T19:20:53.386Z"},{"affected":"< 3.8.0","affected_versions_present":true,"cve_id":"CVE-2026-27156","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27156","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-26T21:33:40.507Z","patch_url":"https://github.com/zauberzeug/nicegui/commit/1861f59cc374ca0dc9d970b157ef3774720f8dbf","primary_source":"","published":"2026-02-24T17:00:21.628Z"},{"affected":"< 3.7.0","affected_versions_present":true,"cve_id":"CVE-2026-25516","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25516","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-09T15:27:15.351Z","patch_url":"https://github.com/zauberzeug/nicegui/commit/f1f7533577875af7d23f161ed3627f73584cb561","primary_source":"","published":"2026-02-06T21:12:19.501Z"},{"affected":"< 3.7.0","affected_versions_present":true,"cve_id":"CVE-2026-25732","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25732","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-09T15:27:21.089Z","patch_url":"https://github.com/zauberzeug/nicegui/blob/main/nicegui/elements/upload_files.py#L110-L115","primary_source":"","published":"2026-02-06T21:09:58.389Z"},{"affected":">= 2.10.0, < 3.5.0","affected_versions_present":true,"cve_id":"CVE-2026-21874","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21874","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-08T14:43:50.018Z","patch_url":"https://github.com/zauberzeug/nicegui/commit/6c52eb2c90c4b67387c025b29646b4bc1578eb83","primary_source":"","published":"2026-01-08T09:50:47.247Z"},{"affected":">= 2.22.0, < 3.5.0","affected_versions_present":true,"cve_id":"CVE-2026-21873","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21873","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-08T15:11:24.092Z","patch_url":"","primary_source":"","published":"2026-01-08T09:50:23.361Z"},{"affected":">= 2.22.0, < 3.5.0","affected_versions_present":true,"cve_id":"CVE-2026-21872","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21872","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-08T15:13:11.652Z","patch_url":"","primary_source":"","published":"2026-01-08T09:50:02.801Z"},{"affected":">= 2.13.0, < 3.5.0","affected_versions_present":true,"cve_id":"CVE-2026-21871","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21871","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-08T15:15:16.509Z","patch_url":"","primary_source":"","published":"2026-01-08T09:49:55.136Z"},{"affected":"< 3.4.0","affected_versions_present":true,"cve_id":"CVE-2025-66645","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-66645","fixed":"3.4.0.","last_modified":"2025-12-10T16:50:41.291Z","patch_url":"https://github.com/zauberzeug/nicegui/commit/a1b89e2a24e1911a40389ace2153a37f4eea92a9","primary_source":"","published":"2025-12-09T21:41:32.049Z"},{"affected":"nicegui: < 3.4.0","affected_versions_present":true,"cve_id":"CVE-2025-66470","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-66470","fixed":"3.4.0.","last_modified":"2025-12-09T16:03:45.875Z","patch_url":"https://github.com/zauberzeug/nicegui/commit/58ad0b36e19922de16bbc79ea3ddd29851b1a3e3","primary_source":"","published":"2025-12-09T00:11:14.690Z"},{"affected":"< 3.4.0","affected_versions_present":true,"cve_id":"CVE-2025-66469","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-66469","fixed":"3.4.0.","last_modified":"2025-12-09T16:03:54.125Z","patch_url":"https://github.com/zauberzeug/nicegui/commit/a8fd25b7d5e23afb1952d0f60a1940e18b5f1ca8","primary_source":"","published":"2025-12-08T23:54:37.955Z"},{"affected":"nicegui: < 3.0.0","affected_versions_present":true,"cve_id":"CVE-2025-53354","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53354","fixed":"3.0.0.","last_modified":"2025-10-03T19:42:40.273Z","patch_url":"https://github.com/zauberzeug/nicegui/security/advisories/GHSA-8c95-hpq2-w46f","primary_source":"","published":"2025-10-03T19:32:21.521Z"},{"affected":"< 2.9.1","affected_versions_present":true,"cve_id":"CVE-2025-21618","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-21618","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-01-06T16:47:43.489Z","patch_url":"","primary_source":"","published":"2025-01-06T16:30:11.349Z"},{"affected":">= 1.4.6, < 1.4.21","affected_versions_present":true,"cve_id":"CVE-2024-32005","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32005","fixed":"1.4.21.","last_modified":"2024-09-06T17:57:52.461Z","patch_url":"https://github.com/zauberzeug/nicegui/security/advisories/GHSA-mwc7-64wg-pgvj","primary_source":"","published":"2024-04-12T20:38:51.147Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"zauberzeug"}}