What is GHSA-v6jv-p6r8-j78w?

GHSA-v6jv-p6r8-j78w is a security advisory published by GitHub Security Advisories with High severity. NiceGUI On Air authentication issue

Which CVE IDs does GHSA-v6jv-p6r8-j78w cover?

GHSA-v6jv-p6r8-j78w covers the following CVE IDs: CVE-2025-21618. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v6jv-p6r8-j78w?

GHSA-v6jv-p6r8-j78w has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-v6jv-p6r8-j78w?

GHSA-v6jv-p6r8-j78w affects 1 product, including: pip/nicegui:\u003c= 2.9.0.

GHSA-v6jv-p6r8-j78wHighCVSS 7.5

NiceGUI On Air authentication issue

Vendor

GitHub Security Advisories

Published

January 6, 2025

Last Modified

January 6, 2025

🔗 CVE IDs covered (1)

CVE-2025-21618 →

📋 Description

Summary

Once a user logins to one browser, all other browsers are logged in without entering password. Even incognito mode.

Impact

high

🎯 Affected products1

pip/nicegui:<= 2.9.0

🔗 References (4)

https://github.com/zauberzeug/nicegui/security/advisories/GHSA-v6jv-p6r8-j78w
https://github.com/zauberzeug/nicegui/commit/1621a4ba6a06676b8094362d36623551e651adc1
https://nvd.nist.gov/vuln/detail/CVE-2025-21618
https://github.com/advisories/GHSA-v6jv-p6r8-j78w