1406 matches found
GHSA-3936-CMFR-PM3M vulnerabilities
Vulnerabilities for packages: kserve, open-webui...
GHSA-752W-5FWX-JX9F vulnerabilities
Vulnerabilities for packages: semgrep, airflow, open-webui, superset, datadog-agent, ggshield, az, kserve, py3-cassandra-medusa...
apache-gravitino (>=1.2.0 <=1.3.0rc2), cloudquery-plugin-sdk (=0.1.52) +15 more potentially affected by CVE-2026-32274 via black (>=26.1.0 <=26.3.0)
black PYPI version =26.1.0, =1.2.0, =0.4.0, =0.2.2, =2.189.0, =0.12.0, =0.7.4, =0.8.0, =0.1.8, =2.54.8, =0.17.1, =1.2.1, =0.1.17, =0.1.18 and more Source cves: CVE-2026-32274 Source advisory: SNYK:PYTHON-BLACK-15518063...
CVE-2025-15603
A security vulnerability has been detected in open-webui up to 0.6.16. Affected is an unknown function of the file backend/startwindows.bat of the component JWT Key Handler. Such manipulation of the argument WEBUISECRETKEY leads to insufficiently random values. It is possible to launch the attack...
EUVD-2025-208452
A security vulnerability has been detected in open-webui up to 0.6.16. Affected is an unknown function of the file backend/startwindows.bat of the component JWT Key Handler. Such manipulation of the argument WEBUISECRETKEY leads to insufficiently random values. It is possible to launch the attack...
CVE-2025-15603
...
CVE-2025-15603
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor explains: "The 't0p-s3cr3t' default was dead code on every supported startup path: start.sh, startwindows.ba...
CVE-2025-15603
Open WebUI up to version 0.6.16 is reported to contain a security issue in the JWT Key Handler, specifically in the file backend/start_windows.bat. Manipulating the WEBUI_SECRET_KEY argument can lead to insufficient randomness in keys, potentially enabling remote exploitation. Multiple connected ...
Open WebUI 安全特征问题漏洞
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI with open-source code. Versions of Open WebUI prior to 0.6.16 have a security vulnerability related to the parameter WEBUISECRETKEY, where insufficient randomness was present in the handling of this parameter...
GHSA-2G6R-C272-W58R vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-28351 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-F2V5-7JQ9-H8CG vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-F2V5-7JQ9-H8CG vulnerabilities
Vulnerabilities for packages: open-webui, litellm, nemo...
CVE-2026-27628 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-WGVP-VG3V-2XQ3 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-9MVC-8737-8J8H vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-996Q-PR4M-CVGQ vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-27025 vulnerabilities
Vulnerabilities for packages: open-webui...