DEBIAN-CVE-2026-64495

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter walks bmg160sampfreqtable looking for the entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i if...

CVE-2025-64495

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is...

CVE-2025-64495

creationtimestamp| type| source ---|---|--- 2025-11-08 05:34:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m53uns5stj2u 2025-11-08 06:05:20+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m53weg3gkvs2 2025-11-10 09:30:05+00:00|...

openwebui-token-tracking (=0.1.7) potentially affected by CVE-2025-64495 via open-webui (=0.6.0)

open-webui PYPI version =0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking =0.1.7 Source cves: CVE-2025-64495 Source advisory: OSV:GHSA-W7XJ-8FX7-WFCH...