Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/04 12:00 a.m.•2 views

CVE-2026-70492: Improper Neutralization of Input During Web Page Generation

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. Th...

8.7CVSS5.8AI score0.00403EPSS
SaveExploits1References6
Rows per page
Query Builder