CVE-2026-21873 | zauberzeug nicegui up to 3.4.x ui.sub_pages cross site scripting (GHSA-mhpg-c27v-6mxr)

January 8, 2026 Yanac

A vulnerability labeled as problematic has been found in zauberzeug nicegui up to 3.4.x. This affects the function ui.sub_pages. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-21873. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More