Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3055
  • PyPI/rucio-webui
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute 13 Jul
  • Fix available
  • Severity - 6.1 (Medium)
PYSEC-2026-3054
  • PyPI/rucio-webui
Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name 13 Jul
  • Fix available
  • Severity - 6.1 (Medium)
PYSEC-2026-3057
  • PyPI/rucio-webui
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata 13 Jul
  • Fix available
  • Severity - 6.1 (Medium)
PYSEC-2026-3058
  • PyPI/rucio-webui
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function 13 Jul
  • Fix available
  • Severity - 7.3 (High)
PYSEC-2026-3053
  • PyPI/rucio-webui
Rucio WebUI has Username Enumeration via Login Error Message 13 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-3056
  • PyPI/rucio-webui
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability 13 Jul
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-528
  • PyPI/rucio
Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API 29 Jun
  • Fix available
  • Severity - 9.4 (Critical)
PYSEC-2026-527
  • PyPI/rucio
Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API 29 Jun
  • Fix available
  • Severity - 9.0 (Critical)
CVE-2026-29090
  • github.com/rucio/rucio
Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database 06 May
  • Fix available
  • Severity - 9.0 (Critical)
CVE-2026-29080
  • github.com/rucio/rucio
Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API 06 May
  • Fix available
  • Severity - 9.4 (Critical)
GHSA-6j7p-qjhg-9947
  • PyPI/rucio
Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API 06 May
  • Fix available
  • Severity - 9.0 (Critical)
GHSA-vjr5-c9qv-hgm3
  • PyPI/rucio
Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API 06 May
  • Fix available
  • Severity - 9.4 (Critical)
CVE-2026-25736
  • github.com/rucio/rucio
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute 25 Feb
  • Fix available
  • Severity - 6.1 (Medium)
CVE-2026-25735
  • github.com/rucio/rucio
Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name 25 Feb
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-fq4f-4738-rqxm
  • PyPI/rucio-webui
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute 25 Feb
  • Fix available
  • Severity - 6.1 (Medium)
CVE-2026-25734
  • github.com/rucio/rucio
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata 25 Feb
  • Fix available
  • Severity - 6.1 (Medium)