漏洞公告

slack-go `SecretsVerifier` accepts empty signing secret without precondition

Marten has an injection vulnerability in its full-text search regConfig parameter

@samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation

Svelte: SSR XSS via Insecure Promise Serialization in hydratable

electerm's encrypt method not safe enough

Electerm Local code through electerm's single-instance socket

DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files

DeepSeek TUI has SSRF‌ IPV6 bypass

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

Svelte Vulnerable to XSS via DOM Clobbering of Internal Framework State

Svelte: ReDoS in `<svelte:element>` Tag Validation

Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts

Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed

Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion

Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)

Open WebUI has an Indirect Object Reference (IDOR) in user notes

Open WebUI has Stored XSS in Banner Component via Improper Sanitization Order

Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints

Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url

Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)

Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`

Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption