high7.5
CVE-2025-21618
NiceGUI On Air authentication issue
Impact
### Summary Once a user logins to one browser, all other browsers are logged in without entering password. Even incognito mode. ### Impact high
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | nicegui | <= 2.9.0 | 2.9.1 |
Affected products
| Product | Affected versions |
|---|---|
| NiceGUI Is An Easy-To-Use, Python-Based UI Framework. | before 2.9.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.