GHSA-G9CG-PRRW-2R8Q vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-QV6H-RV94-W285 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102993 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102994 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102997 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102998 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-FP3H-C4FM-7VVF vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JW7Q-GVRG-4VJ3 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-PHP9-FJ8V-98FJ vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-V247-6F48-MGCJ vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-W23X-9JRW-R45C vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JHR6-GM9C-RQJV vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-68770 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JHR6-GM9C-RQJV vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-68770 vulnerabilities

Vulnerabilities for packages: open-webui...

PYSEC-2026-4065 lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

Summary The LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown is configured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizer rehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derived from user-ingested...

lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

SummaryThe LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown isconfigured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizerrehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derivedfrom user-ingested documents...

PYSEC-2026-4117 Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

Summary The OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it without a browser session. Before checking whether the submitted logout token was genuine, the handler fetched the provider's discovery document and its signing keys over the network...

Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value

Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value SummaryCalendar events carry a free-form meta object that is stored exactly as submitted, with no validation of the values inside it. The scheduler reads the per-event alert offset out of that object i...

Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange

SummaryOpen WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose provider roles the login callback would refuse, or would demote, could still obtain a working session at...