Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 161
Reset filtersopen-webui Vulnerable to Stored XSS via Model Description
open-webui is Vulnerable to Incorrect Access Control
Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events
Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE
Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability
Open WebUI denial of service through endpoint for converting markdown
Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint
Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)
Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/file
Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload
Open WebUI Allows Arbitrary File Reading and Deletion
Open WebUI has vulnerable dependency on starlette via fastapi
Open WebUI Uncontrolled Resource Consumption vulnerability
Open WebUI Uncontrolled Resource Consumption vulnerability
open-webui Insecure Direct Object Reference (IDOR) vulnerability
Open WebUI Stored Cross-Site Scripting Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.