open-webui vulnerabilities

Open WebUI

0.6.27

1 years ago

15 hours ago

Known vulnerabilities in the open-webui package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
C Server-side Request Forgery (SSRF)	[0,)
M Cross-site Request Forgery (CSRF)	[,0.3.16)
M Server-side Request Forgery (SSRF)	[0,)
H Cross-site Request Forgery (CSRF)	[,0.3.33)
H Arbitrary File Upload	[,0.5.17)
H Denial of Service (DoS)	[,0.5.13)
M Cross-site Scripting (XSS)	[0,)
H Missing Authentication for Critical Function	[,0.5.13)
M Insufficient Isolation of System-Dependent Functions	[,0.4.0)
M Cross-site Scripting (XSS)	[0,)
H Directory Traversal	[0,)
H Arbitrary File Write via Archive Extraction (Zip Slip)	[0,)
M Cross-site Scripting (XSS)	[0,)
H Allocation of Resources Without Limits or Throttling	[,0.6.14)
M Improper Privilege Management	[0,)
M Undefined Behavior for Input to API	[0,)
H Incorrect Synchronization	[0,)
C Cross-site Scripting (XSS)	[,0.3.24)
M Exposure of Data Element to Wrong Session	[,0.3.9)
M Improper Privilege Management	[,0.3.9)
H Execution with Unnecessary Privileges	[,0.3.17)
M Information Exposure	[,0.3.17)
H Path Traversal	[,0.5.0)

119 VERSIONS IN TOTAL See all versions