Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filtersOpen WebUI: Stored XSS in Mermaid Markdown Preview
Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendar
Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)
Open WebUI has stored XSS in Excel file preview
Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order
open-webui Vulnerable to Stored XSS via Model Description
Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE
dompurify vulnerable to Cross-site Scripting
dompurify vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.