Security advisories

medium2026-05-14

CVE-2026-45317-Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation

open-webui/open-webui · GHSA-j6w6-986j-2m2m

medium2026-05-14

CVE-2026-45318-Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)

open-webui/open-webui · GHSA-hcwp-82g6-8wxc

low2026-05-14

CVE-2026-45316-Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)

open-webui/open-webui · GHSA-jx2x-j75f-xq3j

high2026-05-14

CVE-2026-45314-Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image

open-webui/open-webui · GHSA-3856-3vxq-m6fc

high2026-05-14

CVE-2026-45315-Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions

open-webui/open-webui · GHSA-m8f9-9whg-f4xr

medium2026-05-14

CVE-2026-45306-pyLoad Has Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory in pyLoad

pyload/pyload · GHSA-w727-595x-pc3r

medium2026-05-14

Home Assistant MCP Server: YAML config backups written under www/ are served unauthenticated at /local/

homeassistant-ai/ha-mcp · GHSA-g39v-cvjh-8fpf

high2026-05-14

CVE-2026-45303-Open WebUI has stored XSS via the HTML renedering view

open-webui/open-webui · GHSA-4vrc-m9ch-6m3r

high2026-05-14

CVE-2026-45301-Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file

open-webui/open-webui · GHSA-r8wh-8m7r-fh33

critical2026-05-14

CVE-2026-45058-Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark

electerm/electerm · GHSA-jgg9-rw32-44pj

medium2026-05-14

CVE-2026-45299-Open WebUI has Stored Cross-Site Scripting In Profile Picture

open-webui/open-webui · GHSA-6gh2-q7cp-9qf6

medium2026-05-14

CVE-2026-45021-Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin

kumahq/kuma · GHSA-3vcp-chfh-f6r2

high2026-05-14

CVE-2026-44541-ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

ethyca/fides · GHSA-5qrq-9645-g5g2

high2026-05-14

CVE-2026-45011-Apostrophe has stored XSS via javascript: URL in Image Widget Link

apostrophecms/apostrophe · GHSA-5f64-7vfc-rcx6

high2026-05-14

CVE-2026-45013-Apostrophe has a Weak Password Recovery Mechanism for Forgotten Password and Improper Input Validation

apostrophecms/apostrophe · GHSA-gf43-24g3-5hw2

high2026-05-14

CVE-2026-45012-Apostrophe has authenticated SSRF in rich-text widget import via @apostrophecms/area/validate-widget

apostrophecms/apostrophe · GHSA-pr28-mf3q-qpg6

critical2026-05-14

CVE-2026-44990-Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

apostrophecms/apostrophe · GHSA-rpr9-rxv7-x643

high2026-05-14

Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections

karakeep-app/karakeep · GHSA-7rx4-c5vx-g8w3

high2026-05-14

CVE-2026-44973-go-billy has path traversal vulnerabilities

go-git/go-billy · GHSA-qw64-3x98-g7q2

low2026-05-14

CVE-2026-44970-dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction

dbt-labs/dbt-mcp · GHSA-jj54-r8gm-2fcf