1 matches found
CVE-2026-70492: Improper Neutralization of Input During Web Page Generation
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. Th...
8.7CVSS5.8AI score0.00403EPSS
SaveExploits1References6
20