MEDIUM5.3PyPI
PYSEC-2026-3053· CVE-2026-25138, GHSA-38wq-6q2w-hcf9Rucio WebUI has Username Enumeration via Login Error Message
Modified: 7/13/2026
package
PyPI/rucio-webui
pkg:pypi/rucio-webui
MEDIUM6.1PyPI
PYSEC-2026-3054· CVE-2026-25735, GHSA-8wpv-6x3f-3rm5Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
Modified: 7/13/2026
MEDIUM6.1PyPI
PYSEC-2026-3055· CVE-2026-25736, GHSA-fq4f-4738-rqxmRucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
Modified: 7/13/2026
HIGH8.1PyPI
PYSEC-2026-3056· CVE-2026-25136, GHSA-h79m-5jjm-jm4qRucio WebUI has a Reflected Cross-site Scripting Vulnerability
Modified: 7/13/2026
MEDIUM6.1PyPI
PYSEC-2026-3057· CVE-2026-25734, GHSA-h9fp-p2p9-873qRucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-3058· CVE-2026-25733, GHSA-rwj9-7j48-9f7qRucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-38wq-6q2w-hcf9· CVE-2026-25138, PYSEC-2026-3053Rucio WebUI has Username Enumeration via Login Error Message
Modified: 7/13/2026
MEDIUM6.1PyPI
GHSA-8wpv-6x3f-3rm5· CVE-2026-25735, PYSEC-2026-3054Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
Modified: 7/13/2026
MEDIUM6.1PyPI
GHSA-fq4f-4738-rqxm· CVE-2026-25736, PYSEC-2026-3055Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
Modified: 7/13/2026
HIGH8.1PyPI
GHSA-h79m-5jjm-jm4q· CVE-2026-25136, PYSEC-2026-3056Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
Modified: 7/13/2026
MEDIUM6.1PyPI
GHSA-h9fp-p2p9-873q· CVE-2026-25734, PYSEC-2026-3057Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
Modified: 7/13/2026
HIGH7.3PyPI
GHSA-rwj9-7j48-9f7q· CVE-2026-25733, PYSEC-2026-3058Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
Modified: 7/13/2026
HIGHPyPI
GHSA-v988-828w-xvf2Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui
Modified: 2/13/2025