378 matches found
CVE-2026-41168 vulnerabilities
Vulnerabilities for packages: nemo, litellm, open-webui...
CVE-2026-41182 vulnerabilities
Vulnerabilities for packages: langfuse, kibana, open-webui, librechat, langfuse-fips...
CVE-2026-42215 vulnerabilities
Vulnerabilities for packages: opal, datahub-ingestion-fips, mlflow-fips, open-webui, checkov, mlflow, awx...
CVE-2026-41314 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-44569
creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:01+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jxwr-g6r6-j3fx...
CVE-2026-44567
creationtimestamp| type| source ---|---|--- 2026-05-05 15:47:41+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-4vg5-rp28-gvjf...
CVE-2026-44566
creationtimestamp| type| source ---|---|--- 2026-05-05 15:44:20+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-9pgh-j74g-qj6m...
GHSA-JJ6C-8H6C-HPPX vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FV5P-P927-QMXR vulnerabilities
Vulnerabilities for packages: open-webui, py3-langchain-text-splitters...
GHSA-FV5P-P927-QMXR vulnerabilities
Vulnerabilities for packages: open-webui, py3-langchain-text-splitters...
ai-security-poc
AI Security POC A fully containerised proof-of-concept for te...
JLSEC-2026-137
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...
GHSA-Q5F5-3GJM-7MFM vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-W828-4QHX-VXX3 vulnerabilities
Vulnerabilities for packages: py3-vllm-cuda-12.4, open-webui...
CVE-2026-33691
A flaw was found in the OWASP core rule set CRS, a set of generic attack detection rules for web application firewalls. A remote attacker could exploit this vulnerability by inserting whitespace padding into filenames during file uploads. This bypasses the file extension checks, allowing the uplo...
OWASP CRS 安全漏洞
OWASP CRS is a set of open-source attack detection rules developed by the CRS Project. Versions prior to OWASP CRS 3.3.9 and 4.25.0 contained security vulnerabilities. These vulnerabilities stemmed from the lack of standardization in file extension checks for spaces, which could lead to bypassing...
CVE-2026-34222 Open WebUI has Broken Access Control in Tool Valves
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.11, there is a broken access control vulnerability in tool values. This issue has been patched in version 0.8.11...
Open WebUI 授权问题漏洞
Open WebUI is an open-source, scalable, feature-rich, and user-friendly self-hosted WebUI. Versions of Open WebUI prior to 0.8.11 had vulnerabilities related to authorization issues, which stemmed from improper access control in tool values...
Obfuscating Code Vulnerabilities against Static Analysis in JavaScript Code
Code obfuscation is widely adopted in modern software development to protect intellectual property and hinder reverse engineering, but it also provides attackers with a powerful means to conceal malicious logic inside otherwise legitimate JavaScript code. In a software supply chain where a single...