openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-45396 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-45396 Source advisory: GHSA-RJMP-VJF2-QF4G...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-45396 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-45396 Source advisory: OSV:GHSA-RJMP-VJF2-QF4G...

CVE-2026-45396

creationtimestamp| type| source ---|---|--- 2026-05-10 19:34:32+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-rjmp-vjf2-qf4g...

EUVD-2025-45396

Malicious code in sari-bakwan66-sukiwir npm...

CVE-2024-45396

Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure that crashes process using quicly. The vulnerability is addressed with commit...

CVE-2024-45396

creationtimestamp| type| source ---|---|--- 2024-10-11 17:51:50+00:00| seen| https://t.me/cvedetector/7687...

CVE-2023-37835

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-45396. Reason: This record is a duplicate of CVE-2023-45396. Notes: All CVE users should reference CVE-2023-45396 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2023-45396

creationtimestamp| type| source ---|---|--- 2023-10-11 18:32:05+00:00| seen| https://t.me/cibsecurity/72107...

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

CVE-2023-45396

CVE-2023-45396 is an IDOR vulnerability affecting Elenos ETG150 FM transmitter version 3.12. The issue enables access to sensitive assets (events profiles) due to insecure direct object references in the application. Connected sources (Red Hat advisory, NVD, PT Security, CNNVD, and others) consis...

CVE-2022-45396

Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-45396

Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-45396

Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-45396

Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-45396

The CVE-2022-45396 entry refers to Jenkins SourceMonitor Plugin 0.2 and earlier, which does not configure its XML parser to prevent XML external entity (XXE) attacks. The vulnerability affects the plugin during the Publish SourceMonitor results step by parsing XML input files, enabling potential ...