openwebui-token-tracking (=0.1.7) potentially affected by CVE-2025-64496 via open-webui (=0.6.0)

open-webui PYPI version =0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking =0.1.7 Source cves: CVE-2025-64496 Source advisory: SNYK:PYTHON-OPENWEBUI-13863430...

CVE-2025-64496

creationtimestamp| type| source ---|---|--- 2025-11-07 03:10:47+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-cm35-v4vp-5xvx 2025-11-08 05:38:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m53uud2apl2k 2026-01-06...