Homepage

open-webui vulnerabilities

Open WebUI

  • latest version

    0.6.34

  • first published

    1 years ago

  • latest version published

    8 days ago

  • licenses detected

  • View open-webui package health on Snyk Advisor  (opens in a new tab)
    • Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the open-webui package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Server-side Request Forgery (SSRF)

    [0,)
    • M
    Cross-site Request Forgery (CSRF)

    [,0.3.16)
    • M
    Server-side Request Forgery (SSRF)

    [0,)
    • H
    Cross-site Request Forgery (CSRF)

    [,0.3.33)
    • H
    Arbitrary File Upload

    [,0.5.17)
    • H
    Denial of Service (DoS)

    [,0.5.13)
    • M
    Cross-site Scripting (XSS)

    [0,)
    • H
    Missing Authentication for Critical Function

    [,0.5.13)
    • M
    Insufficient Isolation of System-Dependent Functions

    [,0.4.0)
    • M
    Cross-site Scripting (XSS)

    [0,)
    • H
    Directory Traversal

    [0,)
    • H
    Arbitrary File Write via Archive Extraction (Zip Slip)

    [0,)
    • M
    Cross-site Scripting (XSS)

    [0,)
    • H
    Allocation of Resources Without Limits or Throttling

    [,0.6.14)
    • M
    Improper Privilege Management

    [0,)
    • M
    Undefined Behavior for Input to API

    [0,)
    • H
    Incorrect Synchronization

    [0,)
    • C
    Cross-site Scripting (XSS)

    [,0.3.24)
    • M
    Exposure of Data Element to Wrong Session

    [,0.3.9)
    • M
    Improper Privilege Management

    [,0.3.9)
    • H
    Execution with Unnecessary Privileges

    [,0.3.17)
    • M
    Information Exposure

    [,0.3.17)
    • H
    Path Traversal

    [,0.5.0)

    Package versions

    126 VERSIONS IN TOTAL See all versions
    versionpublisheddirect vulnerabilities
    0.6.3416 Oct, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L
    0.6.337 Oct, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L
    0.6.3229 Sep, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L
    0.6.3125 Sep, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L
    0.6.3017 Sep, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L
    0.6.2917 Sep, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L
    0.6.2810 Sep, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L
    0.6.279 Sep, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L
    0.6.26.dev128 Aug, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L
    0.6.2628 Aug, 2025
    • 1
      C
    • 3
      H
    • 6
      M
    • 0
      L