2407 matches found
GHSA-PF76-Q698-37V8 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-8X48-8G7J-RQXP vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-HQV3-XM29-P9HQ vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-QX2G-XRX7-VFH8 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-12876 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-71513 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-71514 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-81724 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-CW6X-M8JW-QMRH vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FF5C-CP5C-9WJF vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-VP2X-QP44-57V7 vulnerabilities
Vulnerabilities for packages: open-webui...
PT-2026-89159
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.11.0 Description An issue exists in the calendar event model within backend/open webui/models/calendar.py where the meta.alert minutes value is stored without type validation. Because the shared upcoming-eve...
PT-2026-89160
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.10.0 through 0.11.0 Description An authenticated user can create a parent cycle by placing a folder under itself or one of its descendants. This occurs because the system does not validate that the new parent is not the...
PT-2026-89161
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.11.0 Description An issue exists where role synchronization fails to invalidate cached user records during a privilege demotion. When an administrator is demoted via a trusted role header or OAuth role...
CVE-2026-66393 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.12-sdk, label-studio, nemo, open-webui, apache-beam-python-3.11-sdk, py3-nltk, kubeflow-pipelines-visualization-server, apache-beam-python-3.13-sdk...
GHSA-CV2G-M8RR-888C vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.12-sdk, label-studio, nemo, open-webui, apache-beam-python-3.11-sdk, py3-nltk, kubeflow-pipelines-visualization-server, apache-beam-python-3.13-sdk...
GHSA-CV2G-M8RR-888C vulnerabilities
Vulnerabilities for packages: py3-nltk, kubeflow-pipelines-visualization-server, open-webui...
CVE-2026-66393 vulnerabilities
Vulnerabilities for packages: py3-nltk, kubeflow-pipelines-visualization-server, open-webui...