GHSA-FP3H-C4FM-7VVF vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-PHP9-FJ8V-98FJ vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102994 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JW7Q-GVRG-4VJ3 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102997 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-103000 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102999 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-QV6H-RV94-W285 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-W23X-9JRW-R45C vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-V247-6F48-MGCJ vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102996 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102998 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-G9CG-PRRW-2R8Q vulnerabilities

Vulnerabilities for packages: open-webui...

webui

저작권 C 2003-2021 Young Consulting, Inc 이 프로그램은 자유 소프트웨어입니다. 이 프로그램은 Free Software Foundation이 발표한 GNU 일반 공중 사용 허가서General Public License의 제2판 또는 선택에 따라 이후 버전의 조건에 따라 재배포하거나 수정할 수 있습니다. 이 프로그램은 유용하게 쓰이리라는 희망으로 배포되지만, 어떠한 보증도 제공하지 않습니다. 상품성 또는 특정 목적에의 적합성에 대한 묵시적 보증조차 제공하지 않습니다. 자세한 내용은 GNU 일반 공중 사용...

GHSA-JHR6-GM9C-RQJV vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-68770 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-68770 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JHR6-GM9C-RQJV vulnerabilities

Vulnerabilities for packages: open-webui...

lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

SummaryThe LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown isconfigured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizerrehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derivedfrom user-ingested documents...

Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

SummaryWhen more than one external tool server is reachable in the same request, a tool call to a server configured for bearer authentication can arrive carrying the calling user's Open WebUI session cookies alongside that server's own key. The cookie jar is built per connection, but the callable...