https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:21:29 +0000 https://cve.radiocsirt.org/vuln/cve-2026-39844 <p><strong>Affected:</strong> zauberzeug nicegui</p> <p>NiceGUI is a Python-based UI framework. Prior to 3.10.0, Since PurePosixPath only recognizes forward slashes (/) as path separators, an attacker can bypass this sanitization on Windows by using backslashes (\) in the upload filename. Applications that construct file paths using file.name (a pattern demonstrated in NiceGUI&#39;s bundled examples) are vulnerable to arbitrary file write on Windows. This vulnerability is fixed in 3.10.0.</p> <p><strong>Affected:</strong> zauberzeug nicegui</p> <p>NiceGUI is a Python-based UI framework. Prior to 3.10.0, Since PurePosixPath only recognizes forward slashes (/) as path separators, an attacker can bypass this sanitization on Windows by using backslashes (\) in the upload filename. Applications that construct file paths using file.name (a pattern demonstrated in NiceGUI&#39;s bundled examples) are vulnerable to arbitrary file write on Windows. This vulnerability is fixed in 3.10.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-39844