174 matches found
Access Control Bypass
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Access Control Bypass via the /api/tasks/stop/taskid endpoint. An attacker can enumerate tasks running by other users and use taskid to terminate any tasks running on the server. Remediation Upgrade open-webu...
CVE-2025-65106 vulnerabilities
Vulnerabilities for packages: open-webui...
EUVD-2025-38257
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is...
EUVD-2015-4162
Malware in sbrugna...
EUVD-2017-16708
Malware in sbrugna...
EUVD-2018-12287
Malware in sbrugna...
EUVD-2019-14925
Malware in sbrugna...
EUVD-2018-5923
Malware in sbrugna...
EUVD-2018-17817
Malware in sbrugna...
EUVD-2019-15169
Malware in sbrugna...
EUVD-2019-4220
Malware in sbrugna...
EUVD-2018-5925
Malware in sbrugna...
EUVD-2019-16552
Malware in sbrugna...
EUVD-2025-16137
Malicious code in bioql PyPI...
EUVD-2025-6959
Malicious code in bioql PyPI...
EUVD-2025-12363
Malicious code in bioql PyPI...
EUVD-2025-6952
Malicious code in bioql PyPI...
EUVD-2025-6980
Malicious code in bioql PyPI...