GHSA-fq4f-4738-rqxm
Medium · 6.1CVSS
6.1
EPSS
—
Published
Feb 25, 2026
CISA due date
—
The record
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | rucio-webui | 0 | 35.8.3 |
| PyPI | rucio-webui | 36.0.0rc1 | 38.5.4 |
| PyPI | rucio-webui | 39.0.0rc1 | 39.3.1 |
Related vulnerabilities
- CVE-2026-25736 Rucio is a software framework that provides functionality to organize, manage, and access… Same vulnerability
- CVE-2026-25735 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- CVE-2026-25136 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- CVE-2026-25138 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- CVE-2026-25733 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- CVE-2026-25734 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- GHSA-8wpv-6x3f-3rm5 Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name Also affects rucio-webui
- GHSA-h9fp-p2p9-873q Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata Also affects rucio-webui