Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/24 5:00 p.m.•22 views

Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout

Summary With Redis configured, Open WebUI supports JWT revocation: POST /api/v1/auths/signout per-token jti and OIDC back-channel logout per-user revokedat record revocations in Redis, and HTTP auth getcurrentuser rejects revoked tokens with 401. The realtime authentication surfaces do not perfor...

7.1CVSS5.9AI score0.00456EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder