NiceGUI On Air authentication issue

Description

References

• zauberzeug/nicegui security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-21618 · ADVISORY
• zauberzeug/nicegui commit 1621a4b · WEB
• zauberzeug/nicegui · PACKAGE
• pypi.org/project/nicegui · PACKAGE
• GitHub Advisory GHSA-v6jv-p6r8-j78w · ADVISORY

nicegui의 다른 취약점

• CVE-2026-45554보통 5.3NiceGUI is a Python-based UI framework. Prior to version 3.12.0, two FastAPI routes that serve per-component static assets in NiceGUI accept…
• CVE-2026-45553높음 7.5NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reStructuredText server-side with Docutils w…
• CVE-2026-39844높음 7.5NiceGUI is a Python-based UI framework. Prior to 3.10.0, Since PurePosixPath only recognizes forward slashes (/) as path separators, an atta…
• CVE-2026-33332높음 7.5NiceGUI is a Python-based UI framework. Prior to version 3.9.0, NiceGUI's app.add_media_file() and app.add_media_files() media routes accept…
• CVE-2026-27156보통 6.1NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side elements (`Element.…