High Security Advisories for open-webui in pypi Clear Filters
High
3 days ago
Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web
pypi
open-webui
High
30 days ago
Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events
pypi, npm
open-webui
High
30 days ago
Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE
pypi, npm
open-webui
High
9 months ago
Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability
pypi, npm
open-webui
High
9 months ago
Open WebUI denial of service through endpoint for converting markdown
pypi
open-webui
High
9 months ago
Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions
pypi
open-webui
High
9 months ago
Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint
pypi
open-webui
High
9 months ago
Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/file
pypi
open-webui