open-webui vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-7806Highopen-webui: Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability GHSA-6WJ5-5PGR-JWQ8Highopen-webui: Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/file CVE-2024-7045Mediumopen-webui: Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read CVE-2024-7053Highopen-webui: Open WebUI Vulnerable to a Session Fixation Attack CVE-2024-7046Mediumopen-webui: Open WebUI Allows Viewing of Admin Details CVE-2024-7044Mediumopen-webui: Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload CVE-2024-7036Highopen-webui: Open WebUI Uncontrolled Resource Consumption vulnerability CVE-2024-7043Highopen-webui: Open WebUI Allows Arbitrary File Reading and Deletion GHSA-W466-2WFC-8G58Highopen-webui: Open WebUI has vulnerable dependency on starlette via fastapi CVE-2024-12537Highopen-webui: Open WebUI Uncontrolled Resource Consumption vulnerability CVE-2024-12534Highopen-webui: Open WebUI Uncontrolled Resource Consumption vulnerability CVE-2024-7037Mediumopen-webui: open-webui allows writing and deleting arbitrary files CVE-2024-7041Mediumopen-webui: open-webui Insecure Direct Object Reference (IDOR) vulnerability CVE-2024-6706Mediumopen-webui: Open WebUI Stored Cross-Site Scripting Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo