open-webui vulnerabilities (npm)
10 vulnerabilities.
-
open-webuinpm Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order 8.1 High -
open-webuinpm Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution 7.2 High -
open-webuinpm Open WebUI: Stored Cross-Site Scripting in SVG Renderer 5.1 Medium -
open-webuinpm Open WebUI: Stored XSS via Model Description 7.3 High -
open-webuinpm Open WebUI vulnerable to Stored DOM XSS via Note 'Download PDF' 8.7 High -
open-webuinpm Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events 7.3 High -
open-webuinpm Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE 8.7 High -
open-webuinpm Open WebUI Uncontrolled Resource Consumption vulnerability 7.5 High -
open-webuinpm Open WebUI Uncontrolled Resource Consumption vulnerability 7.5 High -
open-webuinpm Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability 7.5 High