2407 matches found
CVE-2025-15603
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor explains: "The 't0p-s3cr3t' default was dead code on every supported startup path: start.sh, startwindows.ba...
CVE-2025-15603
Open WebUI up to version 0.6.16 is reported to contain a security issue in the JWT Key Handler, specifically in the file backend/start_windows.bat. Manipulating the WEBUI_SECRET_KEY argument can lead to insufficient randomness in keys, potentially enabling remote exploitation. Multiple connected ...
CVE-2025-15603
...
Open WebUI 安全特征问题漏洞
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI with open-source code. Versions of Open WebUI prior to 0.6.16 have a security vulnerability related to the parameter WEBUISECRETKEY, where insufficient randomness was present in the handling of this parameter...
GHSA-2G6R-C272-W58R vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-F2V5-7JQ9-H8CG vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-28351 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-F2V5-7JQ9-H8CG vulnerabilities
Vulnerabilities for packages: nemo, open-webui, litellm...
CVE-2026-27628 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-2Q4J-M29V-HQ73 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-9MVC-8737-8J8H vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-WGVP-VG3V-2XQ3 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-27024 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-27025 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-27026 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-996Q-PR4M-CVGQ vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-29VQ-49WR-VM6X vulnerabilities
Vulnerabilities for packages: mlflow, kubeflow-volumes-web-app, emissary, kubeflow-pipelines-visualization-server, superset, open-webui, airflow...
CVE-2026-27205 vulnerabilities
Vulnerabilities for packages: mlflow, kubeflow-volumes-web-app, mitmproxy, emissary, open-webui, airflow...