漏洞公告

Ghost: Member existence leak via magic link sign-in response

XSS in Ghost's ActivityPub client

Ghost: Session Fixation in Ghost Admin

Ghost: Theme Upload Path Traversal

Ghost: Database Backup Path Traversal

Ghost: Server-Side Request Forgery in Image Fetching

Ghost: Blind Password Hash Disclosure in Ghost Admin API

Ghost: Mobiledoc image-size fetch SSRF

Ghost: Server-side request forgery via DNS rebinding in external request handling

Ghost: Private IP filtering bypass to make server-side requests to internal services

Ghost: Archived Offers can be Redeemed

Ghost: File Upload Content-Type Spoofing

Ghost: Cross-Site Scripting in Universal Import

Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder

Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints

Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check

Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing

Open WebUI: DNS Rebinding SSRF Bypass

Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata

Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup

Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin