Information Exposure

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Information Exposure via the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints. An attacker can access sensitive source code and potentially embedded secrets by making...

Incorrect Authorization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization via the /resolveauthenticatedconnection process. An attacker can gain unauthorized interactive terminal access by using a valid, unexpired JWT for an account with insufficient approval...

Regular Expression Denial of Service (ReDoS)

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS through the automation recurrence rule process. An attacker can cause the application to become unresponsive and deny service to all users by submitting specially...

Server-side Request Forgery (SSRF)

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the process of hostname resolution and subsequent HTTP connection. An attacker can access internal network resources and sensitive metadata by submitting a specially...

Missing Authorization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Missing Authorization via the chat completion, chat completed, and chat action endpoints when an inline model definition is used with attached knowledge metadata. An attacker can access the indexed content of...

Incorrect Authorization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization through the syncknowledgecleanup handler in the backend, which processes directory and file IDs from the request body without verifying their association with the specified knowledge...

Improper Restriction of Rendered UI Layers or Frames

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames in the FilePreview process. An attacker can gain unauthorized access to session tokens and potentially take over user accounts by serving a crafted HTML fi...

Server-side Request Forgery (SSRF)

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the validateurl process. An attacker can access internal services and cloud metadata by submitting specially crafted NAT64-encoded URLs that bypass IP address filtering. Th...

Incorrect Authorization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization through the processchatpayload process. An attacker can bypass intended permission restrictions by supplying a crafted features object in a chat-completion request, allowing unauthoriz...

Server-side Request Forgery (SSRF)

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the renderVegaVisualization process. An attacker can cause a victim's browser to make arbitrary outbound GET requests and read responses from same-origin or CORS-permissiv...

Missing Authorization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Missing Authorization through the deletechatbyid process. An attacker can disrupt another user's active chat generation tasks by sending a DELETE request to the relevant endpoint if they possess the target...

Improper Authentication

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Improper Authentication via the tokenexchange process. An attacker can gain unauthorized access to another user's account by exchanging an OAuth access token issued to any client registered with the same...

Missing Authorization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Missing Authorization in the updatemessagebyid and deletemessagebyid handlers when processing standard channels due to insufficient authorization checks. An attacker can modify or delete messages authored by...

Server-side Request Forgery (SSRF)

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the SafePlaywrightURLLoader process. An attacker can access sensitive internal resources by submitting a crafted URL when the Playwright web loader is enabled, allowing th...

Information Exposure

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Information Exposure via the POST /api/v1/oauth2-credential/refresh/:credentialId endpoint, which does not require authentication. An attacker can obtain access tokens for any connected service by sending a...

Arbitrary Code Injection

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Arbitrary Code Injection via the run method in the CSVAgents class. An attacker can execute arbitrary code in the context of the server process by sending crafted prompts to a chatflow using the CSV Agent...

Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection via the run method in the CSVAgents class. An attacker can execute arbitrary code in the context of the server process by sending crafted prompts to a chatflow using...

Authorization Bypass Through User-Controlled Key

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the updateSubscriptionPlan and updateAdditionalSeats processes. An attacker can perform unauthorized billing operations on other tenants by supplying a...

Missing Authorization

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Missing Authorization via the generateTextToSpeech process. An attacker can abuse stored API credentials to generate unlimited text-to-speech audio and incur financial costs on the account owner by sending...

Missing Authorization

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Missing Authorization via the updateExecution process. An attacker can alter execution state, data, and metadata of any execution by sending crafted requests to the affected endpoint using any valid API key...

Insufficient Verification of Data Authenticity

Overview marimo is an A library for making reactive notebooks and apps Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via sanitizepyprojectdict in the PEP-723 script metadata handling path. An attacker can exfiltrate an operator’s API key by...

Memory Allocation with Excessive Size Value

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the checkforlanguage function. An attacker can exhaust system memory by submittin...

Uncontrolled Recursion

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Uncontrolled Recursion via GEOSGeometry when parsing deeply nested GEOMETRYCOLLECTION objects provided as well-known text WKT,...

External Control of File Name or Path

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to External Control of File Name or Path via the GDALRaster constructor in spatial lookups. An attacker can write arbitrary files or...

Cross-site Scripting (XSS)

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the displayforfield function. An attacker can execute arbitrary JavaScript code in the context of th...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the HTTP/2 handling process when nghttp2sessionmemsend is called re-entrantly during the execution of nghttp2sessionmemrecv. An attacker can cause a heap-use-after-free condition by triggering concurrent or re-entrant...

Incorrect Authorization

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Incorrect Authorization in the OAuth2 credential handling process due to insufficient workspace scoping and authentication checks on the authorize, callback, and refresh endpoints. An attacker can access or...

Information Exposure

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Information Exposure via the GET /api/v1/credentials/:id endpoint, which decrypts and returns sensitive credential data in the plainDataObj field without adequate redaction for fields defined as type...

Missing Authorization

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Missing Authorization in the GET /api/v1/upsert-history endpoint, which returns the entire server-wide upsert history, including sensitive configuration data such as integration parameters and infrastructur...

Incorrect Authorization

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Incorrect Authorization via the credential parameter in the affected API endpoints. An attacker can gain unauthorized access to credentials and perform actions in another workspace by supplying a known...

Eval Injection

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Eval Injection via the CSVAgent process. An attacker can execute arbitrary code on the host system by injecting malicious input into the csvFile parameter, which is interpolated directly into a Python sourc...

Eval Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Eval Injection via the CSVAgent process. An attacker can execute arbitrary code on the host system by injecting malicious input into the csvFile parameter, which is interpolated directly into...

External Control of File Name or Path

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to External Control of File Name or Path via the S3 Directory loader process. An attacker can write arbitrary files to locations outside the intended temporary directory by supplying crafted S3 object keys...

External Control of File Name or Path

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to External Control of File Name or Path via the S3 Directory loader process. An attacker can write arbitrary files to locations outside the intended temporary directory by supplying crafted S3...

Incorrect Authorization

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Incorrect Authorization injection of $vars into the custom JavaScript execution context without proper authorization checks. An attacker can access sensitive workspace variables, including secrets from...

Incomplete List of Disallowed Inputs

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the validatePythonCodeForDataFrame process. An attacker can execute arbitrary operating system commands by submitting specially crafted Python code...

Incomplete List of Disallowed Inputs

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the validatePythonCodeForDataFrame process. An attacker can execute arbitrary operating system commands by submitting specially crafted Python code...

Incomplete List of Disallowed Inputs

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the validatePythonCodeForDataFrame process. An attacker can execute arbitrary operating system commands by submitting specially crafted Python code containing Unicod...

Incomplete List of Disallowed Inputs

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the validatePythonCodeForDataFrame process. An attacker can execute arbitrary operating system commands by submitting specially crafted Python code containing Unicod...

Incomplete List of Disallowed Inputs

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs through insufficient validation of environment variables in the validateEnvironmentVariables process. An attacker can execute arbitrary code with the privileges of the...

Incomplete List of Disallowed Inputs

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs through insufficient validation of environment variables in the validateEnvironmentVariables process. An attacker can execute arbitrary code with the...

Incorrect Authorization

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Incorrect Authorization in the DELETE /api/v1/chatflows/:id process. An attacker can perform unauthorized deletion of resources by exploiting insufficient validation of permission scopes, allowing users wit...

Arbitrary Code Injection

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Arbitrary Code Injection via the additionalConfig input, which allows overriding the intended SQLite database path. An attacker can achieve arbitrary code execution by crafting a malicious payload that writ...

Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection via the additionalConfig input, which allows overriding the intended SQLite database path. An attacker can achieve arbitrary code execution by crafting a malicious...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the overrideConfig process. An attacker can inject arbitrary properties into the flow execution context by sending crafted...

Server-Side Request Forgery (SSRF)

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Server-Side Request Forgery SSRF in the isDeniedIP function, which fails to properly normalize IPv4-mapped IPv6 addresses before checking them against the deny list. An attacker can access internal services...

Arbitrary Code Injection

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Arbitrary Code Injection in the CSVAgent process, where user-supplied input is used to construct Python code executed via pyodide. An attacker can execute arbitrary code by supplying a crafted payload that...

Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection in the CSVAgent process, where user-supplied input is used to construct Python code executed via pyodide. An attacker can execute arbitrary code by supplying a crafte...

Arbitrary Code Injection

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Arbitrary Code Injection via unsanitized string interpolation in the CSVAgent process. An attacker can execute arbitrary operating system commands, read sensitive files, steal credentials, and cause denial ...

Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection via unsanitized string interpolation in the CSVAgent process. An attacker can execute arbitrary operating system commands, read sensitive files, steal credentials, an...