Lucene search
+L

4 matches found

PyPA
PyPA
•added 2026/08/10 10:43 a.m.•32 views

Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing

SummaryIn every affected release, automation recurrence parsing anchors minutely and hourly rules at a fixed date of 2000-01-01 and then walks forward one interval at a time to find the next run. A single FREQ=MINUTELY rule therefore enumerates roughly a quarter-century of occurrences,...

6.5CVSS5.7AI score0.00573EPSS
SaveExploits1References7Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/10 12:00 a.m.•11 views

PT-2026-76477

Summary In every affected release, automation recurrence parsing anchors minutely and hourly rules at a fixed date of 2000-01-01 and then walks forward one interval at a time to find the next run. A single FREQ=MINUTELY rule therefore enumerates roughly a quarter-century of occurrences,...

6.5CVSS5.7AI score0.00573EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2026/08/04 8:42 p.m.•21 views

Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing

Summary In every affected release, automation recurrence parsing anchors minutely and hourly rules at a fixed date of 2000-01-01 and then walks forward one interval at a time to find the next run. A single FREQ=MINUTELY rule therefore enumerates roughly a quarter-century of occurrences,...

6.5CVSS5.7AI score0.00573EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•9 views

PT-2026-67857

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.10.0 Description Automation recurrence parsing in backend/open webui/utils/automations.py anchors minutely and hourly rules to a fixed date of 2000-01-01. When calculating the next run, the system walks...

6.5CVSS5.7AI score0.00573EPSS
SaveExploits1References11
Rows per page
Query Builder