CVE-2026-59938 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-12061 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-59936 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-67422 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-FG7F-2386-8897 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-59937 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-55H5-XMCQ-C37V vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-59935 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-5QJQ-93H5-HRGP vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-G867-7843-WF8Q vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-5XF7-4P34-54QR vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...

EUVD-2026-55700

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...

CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339

Technical details are not publicly available in the provided documents for CVE-2026-12339. No vendor-confirmed impact, affected products, or remediation are specified here. Monitor for updates and refer to the CVE entry for official details.

CVE-2026-71554 vulnerabilities

Vulnerabilities for packages: mitmproxy, airflow, open-webui...

GHSA-6HR6-W5QG-QMWG vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, prefect-fips, authentik, airflow, mitmproxy, apache-beam-python-3.14-sdk, localstack, authentik-fips, open-webui...

CVE-2026-70491

creationtimestamp| type| source ---|---|--- 2026-08-04 22:35:12+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3r7g-q6cg-q2vx 2026-08-05 14:31:53+00:00| seen| https://gist.github.com/alon710/33c3bff7f99aec7fdcddc66966d519a0...