rucio-webui vulnerabilities
CVEs whose affected-version data names the rucio-webui package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-25733High· 7.3Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
▾ Twilightrucio-webui · rucio-webuiEPSS 0.26%via OSV
CVE-2026-25734Medium· 6.1Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
▾ Sunlitrucio-webui · rucio-webuiEPSS 0.29%via OSV
CVE-2026-25136High· 8.1Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
▾ Twilightrucio-webui · rucio-webuiEPSS 0.26%via OSV
CVE-2026-25736Medium· 6.1Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
▾ Sunlitrucio-webui · rucio-webuiEPSS 0.29%via OSV
CVE-2026-25735Medium· 6.1Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
▾ Sunlitrucio-webui · rucio-webuiEPSS 0.29%via OSV
CVE-2026-25138Medium· 5.3Rucio WebUI has Username Enumeration via Login Error Message
Rucio WebUI has Username Enumeration via Login Error Message
▾ Sunlitrucio-webui · rucio-webuiEPSS 0.33%via OSV