CVE-2026-91130

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in src/components/chart/statistics-chart.ts passed entity names through getStatisticLabel and computeStateName and interpolated param.seriesName into ECharts...

CVE-2024-8017

An XSS vulnerability exists in open-webui/open-webui versions = 0.3.8, specifically in the function that constructs the HTML for tooltips. This vulnerability allows attackers to perform operations with the victim's privileges, such as stealing chat history, deleting chats, and escalating their ow...

PT-2025-12202

Name of the Vulnerable Software and Affected Versions open-webui/open-webui versions = 0.3.8 Description An XSS issue exists, specifically in the function that constructs the HTML for tooltips, allowing attackers to perform operations with the victim's privileges. This includes stealing chat...