Security advisories

high2026-06-17

CVE-2026-28737-Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer

go-gitea/gitea · GHSA-9cpj-qc93-vw8v

high2026-06-17

CVE-2026-24791-Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

go-gitea/gitea · GHSA-wrr5-99h5-gq57

high2026-06-17

CVE-2026-22555-Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration

go-gitea/gitea · GHSA-fhx7-m96w-mv29

medium2026-06-17

CVE-2026-54324-Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join

daytonaio/daytona · GHSA-qwxf-2m7m-2m3x

medium2026-06-17

CVE-2026-54316-Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

anthropics/claude-code · GHSA-fg94-h982-f3mm

medium2026-06-17

CVE-2026-54022-Open WebUI: Any authenticated user can read other users' private notes via Socket.IO

open-webui/open-webui · GHSA-8788-j68r-3cgh

medium2026-06-17

CVE-2026-54021-Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter

open-webui/open-webui · GHSA-9rpj-v7hf-vv2w

medium2026-06-17

CVE-2026-54019-Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode

open-webui/open-webui · GHSA-p5cp-r7rg-qpxc

high2026-06-17

CVE-2026-54018-Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects

open-webui/open-webui · GHSA-jrfp-m64g-pcwv

high2026-06-17

CVE-2026-54017-Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal

open-webui/open-webui · GHSA-r2wg-2mcr-66rv

high2026-06-17

CVE-2026-53840-OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin

openclaw/openclaw · GHSA-rjxq-qqhf-8hwh

medium2026-06-17

CVE-2026-54016-Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration

open-webui/open-webui · GHSA-cx9v-4qj2-jrw6

medium2026-06-17

CVE-2026-54015-Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletion

open-webui/open-webui · GHSA-4r4w-2wgp-w7cj

medium2026-06-17

CVE-2026-54014-Open WebUI: Sibling-Prefix Path Traversal via /cache/{path}

open-webui/open-webui · GHSA-j2c8-v969-8r5c

high2026-06-17

CVE-2026-54013-Open WebUI: Stored XSS to Account Takeover via Model Profile Images

open-webui/open-webui · GHSA-v2qm-5wxj-qhj7

high2026-06-17

CVE-2026-54012-Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion

open-webui/open-webui · GHSA-vjqm-6gcc-62cr

high2026-06-17

CVE-2026-54011-Open WebUI: Stored XSS in Mermaid Markdown Preview

open-webui/open-webui · GHSA-v8qj-hxv7-mgvv

high2026-06-17

CVE-2026-54010-Open WebUI: Forged chat-file link allows cross-user file read and deletion

open-webui/open-webui · GHSA-vrhc-3fr6-pc3c

medium2026-06-17

CVE-2026-54009-Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field

open-webui/open-webui · GHSA-wch8-mhj5-9frg

high2026-06-17

CVE-2026-54008-Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)

open-webui/open-webui · GHSA-226f-f24g-524w