Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2 days ago6 views

Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically

Summary The built-in knowledge search tools let a chat participant choose the pattern used to grep knowledge files. Patterns containing regex metacharacters were compiled with Python's backtracking re engine and run against every line of every reachable file, with no time limit anywhere on that...

6.5CVSS5.6AI score0.00305EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder