GHSA-rwj9-7j48-9f7q
High · 7.3CVSS
7.3
EPSS
—
Published
Feb 25, 2026
CISA due date
—
The record
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | rucio-webui | 0 | 35.8.3 |
| PyPI | rucio-webui | 36.0.0rc1 | 38.5.4 |
| PyPI | rucio-webui | 39.0.0rc1 | 39.3.1 |
Related vulnerabilities
- CVE-2026-25733 Rucio is a software framework that provides functionality to organize, manage, and access… Same vulnerability
- CVE-2026-25735 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- CVE-2026-25736 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- CVE-2026-25136 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- CVE-2026-25138 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- CVE-2026-25734 Rucio is a software framework that provides functionality to organize, manage, and access… Also affects rucio-webui
- GHSA-fq4f-4738-rqxm Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE… Also affects rucio-webui
- GHSA-8wpv-6x3f-3rm5 Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name Also affects rucio-webui