GHSA-F2V5-7JQ9-H8CG vulnerabilities

Vulnerabilities for packages: open-webui, nemo, litellm...

CVE-2026-27628 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-WGVP-VG3V-2XQ3 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-996Q-PR4M-CVGQ vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-27025 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-2Q4J-M29V-HQ73 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-27024 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-27026 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-9MVC-8737-8J8H vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-27199 vulnerabilities

Vulnerabilities for packages: emissary, kubeflow-pipelines-visualization-server, airflow, kubeflow-volumes-web-app, superset, open-webui, mlflow...

GHSA-29VQ-49WR-VM6X vulnerabilities

Vulnerabilities for packages: emissary, kubeflow-pipelines-visualization-server, airflow, kubeflow-volumes-web-app, superset, open-webui, mlflow...

CVE-2026-27205 vulnerabilities

Vulnerabilities for packages: mitmproxy, emissary, airflow, kubeflow-volumes-web-app, open-webui, mlflow...

GHSA-68RP-WP8R-4726 vulnerabilities

Vulnerabilities for packages: mitmproxy, emissary, airflow, kubeflow-volumes-web-app, open-webui, mlflow...

CVE-2026-26193

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the embeds property on a response message, the content of which is loaded into an iFrame with a sandbox that has allow-scripts...

CVE-2026-26192

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.7.0, aanually modifying chat history allows setting the html property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML...

CVE-2026-27024 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-WGVP-VG3V-2XQ3 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-27026 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-9MVC-8737-8J8H vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-68RP-WP8R-4726 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, mlflow, airflow-core, emissary, airflow, mitmproxy, open-webui...