检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-4G37-7P2C-38R9 CVE-2026-45398 | Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls | 高危 | PyPIopen-webui | 已审查 | 2026-05-15 04:26 | 2026-05-16 07:55 |
| GHSA-65PG-QHHW-MXWG CVE-2026-45397 | Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
PyPIopen-webui |
| 已审查 |
| 2026-05-15 04:26 |
| 2026-05-16 07:55 |
| GHSA-RJMP-VJF2-QF4G CVE-2026-45396 | Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:26 | 2026-05-16 07:55 |
| GHSA-P4FX-23FQ-JFG6 CVE-2026-45395 | Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution | 高危 | npmopen-webui | 已审查 | 2026-05-15 04:26 | 2026-05-16 07:55 |
| GHSA-H2CW-7QW9-56XR CVE-2026-45387 | Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage) | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:26 | 2026-05-16 07:54 |
| GHSA-5GC6-XHV4-2WG6 CVE-2026-45386 | Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:25 | 2026-05-16 07:54 |
| GHSA-WWHQ-CX22-F7VV CVE-2026-45385 | Open WebUI has an IDOR vulnerability in the update_message_by_id API endpoint | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:25 | 2026-05-16 07:54 |
| GHSA-V6QF-75PR-P96M CVE-2026-45365 | Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED] | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:25 | 2026-05-20 00:00 |
| GHSA-JH9G-8JQW-M2QX CVE-2026-45351 | Open WebUI Exposes System Prompt to Regular User [Non-Admin] | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:25 | 2026-05-19 23:59 |
| GHSA-4PCG-253R-RF9W CVE-2026-45350 | Open WebUI's chat completion API allows tool restrictions to be bypassed | 高危 | PyPIopen-webui | 已审查 | 2026-05-15 04:24 | 2026-05-19 23:59 |
| GHSA-GFM2-XM6C-37QC CVE-2026-45349 | Open WebUI has Broken Access Control for Completions API | 高危 | PyPIopen-webui | 已审查 | 2026-05-15 04:24 | 2026-05-16 07:54 |
| GHSA-FCJQ-435V-JX94 CVE-2026-45348 | pyLoad is vulnerable to stored XSS in Downloads view via unsanitized link URL in packages.js template literal | 高危 | PyPIpyload-ng | 已审查 | 2026-05-15 04:23 | 2026-06-09 18:19 |
| GHSA-77VG-94RM-HX3P CVE-2026-42570 | Svelte devalue: DoS via sparse array deserialization | 高危 | npmdevalue | 已审查 | 2026-05-15 04:23 | 2026-06-10 02:41 |
| GHSA-F776-FP4W-266C CVE-2026-45347 | Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:22 | 2026-05-19 23:59 |
| GHSA-R29H-37FJ-X2W6 CVE-2026-45346 | Open WebUI Has Stored Cross-Site Scripting in SVG Renderer | 中危 | npmopen-webui | 已审查 | 2026-05-15 04:21 | 2026-05-19 23:59 |
| GHSA-GM54-M39W-GRJP CVE-2026-45345 | Open WebUI missing authorization check at the model update function - models from other users can be updated | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:21 | 2026-05-19 23:59 |
| GHSA-57Q6-FVP4-PQMM CVE-2026-45339 | Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints | 中危 | PyPIopen-webu | 已审查 | 2026-05-15 04:21 | 2026-05-16 07:53 |
| GHSA-24C9-2M8Q-QHMH CVE-2026-45338 | Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py) | 高危 | PyPIopen-webui | 已审查 | 2026-05-15 04:19 | 2026-05-19 23:59 |
| GHSA-PR6F-5X2Q-RWFP CVE-2026-42599 | Svelte SSR vulnerable to cross-site scripting via spread attributes | 中危 | npmsvelte | 已审查 | 2026-05-15 04:19 | 2026-06-10 02:41 |
| GHSA-4V7R-F4W8-8972 CVE-2026-45331 | Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature | 高危 | PyPIopen-webui | 已审查 | 2026-05-15 04:18 | 2026-05-16 07:53 |
| GHSA-J6W6-986J-2M2M CVE-2026-45317 | Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:18 | 2026-05-19 23:58 |
| GHSA-HCWP-82G6-8WXC CVE-2026-45318 | Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify) | 中危 | PyPIopen-webui | 已审查 | 2026-05-15 04:18 | 2026-05-19 23:58 |
| GHSA-JX2X-J75F-XQ3J CVE-2026-45316 | Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access) | 低危 | PyPIopen-webui | 已审查 | 2026-05-15 04:18 | 2026-05-19 23:58 |
| GHSA-3856-3VXQ-M6FC CVE-2026-45314 | Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image | 高危 | PyPIopen-webui | 已审查 | 2026-05-15 04:18 | 2026-05-19 23:58 |
| GHSA-M8F9-9WHG-F4XR CVE-2026-45315 | Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions | 高危 | PyPIopen-webui | 已审查 | 2026-05-15 04:17 | 2026-05-20 00:02 |