hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87016 via open-webui (0.11.0)

open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87016 Source advisory: OSV:GHSA-WPMR-8H3Q-FWJ7...

CVE-2026-87016

creationtimestamp| type| source ---|---|--- 2026-09-09 23:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4ndzoauy24 2026-09-10 22:35:05+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-wpmr-8h3q-fwj7 2026-09-16...