EUVD-2025-7009

Malicious code in bioql PyPI...

EUVD-2025-6961

Malicious code in bioql PyPI...

EUVD-2025-6956

Malicious code in bioql PyPI...

EUVD-2025-12363

Malicious code in bioql PyPI...

EUVD-2024-3086

Malicious code in bioql PyPI...

EUVD-2024-48049

Malicious code in bioql PyPI...

EUVD-2024-48050

Malicious code in bioql PyPI...

EUVD-2024-3166

Malicious code in bioql PyPI...

EUVD-2024-28183

Malicious code in bioql PyPI...

EUVD-2025-6980

Malicious code in bioql PyPI...

EUVD-2025-6983

Malicious code in bioql PyPI...

EUVD-2025-6924

Malicious code in bioql PyPI...

CVE-2025-59420 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-9GGR-2464-2J32 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-6984 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-PC6W-59FV-RH23 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-7HFW-26VP-JP8M vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-55197 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2024-7049

In version v0.3.8 of open-webui/open-webui, a vulnerability exists where a token is returned when a user with a pending role logs in. This allows the user to perform actions without admin confirmation, bypassing the intended approval process...

CVE-2024-7041

An Insecure Direct Object Reference IDOR vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint http://0.0.0.0:3000/api/v1/memories/id/update, where the decentralization design is flawed, allowing attackers to edit other users' memories without...