Homepage

open-webui vulnerabilities

Open WebUI
Licenses: MIT | BSD-3-Clause | Unknown
Published: 1 years ago Last updated: 58 minutes ago Latest version: 0.8.7
pip
GitHub

Package Health Score

57/100
  • securitySecurity issues found
  • popularitySmall
  • maintenanceSustainable
  • communityActive

Maintenance

SUSTAINABLE

Commit Frequency

No commits over the last 6 months

Open Issues
149
Open PR
41
New PRS
1
Last Release
6 days ago
Last Commit
6 months ago
Maintainers
1

Further analysis of the maintenance status of open-webui based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

We found that open-webui demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Popularity

SMALL
GitHub Stars
2.3k
Forks
679
Contributors
0

Based on project statistics from the GitHub repository for the PyPI package open-webui, we found that it has been starred 2,292 times.

Community

ACTIVE
Readme
Yes
Contributing.md
Yes
Code of Conduct
Yes
Contributors
0
Funding
Yes
LICENSE
MIT

This project has seen only 10 or less contributors.

License

MIT
[0.1.124,0.5.8);
[0.6.6,0.6.16);
BSD-3-Clause[0.5.8,0.6.6);
Unknown[0.6.16,);
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the open-webui package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Security

SECURITY ISSUES FOUND
Show only direct vulnerabilities in latest version
VulnerabilityVulnerable Version
  • H
Command Injection

[0,)
  • H
Arbitrary Code Injection

[0,)
  • H
Missing Authentication for Critical Function

[0,)
  • M
Access Control Bypass

[0,)

Package versions

146 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
0.8.72 Mar, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L
0.8.61 Mar, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L
0.8.523 Feb, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L
0.8.423 Feb, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L
0.8.317 Feb, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L
0.8.216 Feb, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L
0.8.114 Feb, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L
0.8.012 Feb, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L
0.7.210 Jan, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L
0.7.19 Jan, 2026
  • 0
    C
  • 3
    H
  • 1
    M
  • 0
    L

open-webui dependencies

15 IN TOTAL
accelerateaiocacheaiofilesanthropicasync-timeoutcryptographygoogle-api-python-clientgoogle-auth-httplib2google-auth-oauthlibopenaipsutilpydubredissentencepiecetiktoken