Security advisories

high2026-09-10

CVE-2026-55416-Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

View chart →

pimcore/pimcore · GHSA-23rh-xw42-fq82

high2026-09-10

CVE-2026-86082-n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node

View chart →

n8n-io/n8n · GHSA-34ff-336r-5q23

high2026-09-10

CVE-2026-86081-n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path

View chart →

n8n-io/n8n · GHSA-j535-v25q-vx3q

high2026-09-10

CVE-2026-86075-n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint

View chart →

n8n-io/n8n · GHSA-hh89-3r9w-qj3j

high2026-09-10

CVE-2026-86076-n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution

View chart →

n8n-io/n8n · GHSA-hw8v-xxg5-vvvx

medium2026-09-10

CVE-2026-87017-Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

View chart →

open-webui/open-webui · GHSA-pcvc-8vrv-8q6w

medium2026-09-10

CVE-2026-87994-Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint

View chart →

open-webui/open-webui · GHSA-fmqh-xp37-5hr8

high2026-09-10

CVE-2026-87995-Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin

View chart →

open-webui/open-webui · GHSA-jmc6-2wr8-h3wj

high2026-09-10

CVE-2026-87996-Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader

View chart →

open-webui/open-webui · GHSA-4v28-j6q3-5m4r

medium2026-09-10

CVE-2026-87997-Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions

View chart →

open-webui/open-webui · GHSA-3pf7-q2g3-wj28

high2026-09-10

CVE-2026-87998-Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

View chart →

open-webui/open-webui · GHSA-2724-6cpj-gf3v

high2026-09-10

CVE-2026-87999-Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

View chart →

open-webui/open-webui · GHSA-34r3-9m95-vq73

medium2026-09-10

CVE-2026-88005-Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange

View chart →

open-webui/open-webui · GHSA-4qg5-cxx4-g927

high2026-09-10

CVE-2026-59161-Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation

View chart →

qax-os/excelize · GHSA-q5j5-6p94-4gwc

medium2026-09-10

CVE-2026-59162-Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

View chart →

qax-os/excelize · GHSA-fx5j-qcqg-grpf

high2026-09-10

@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name

View chart →

eigenpal/docx-editor · GHSA-x7m8-jrm8-hpvx

critical2026-09-10

CVE-2026-84939-Apache FreeMarker template loading mechanism vulnerable to path traversal

View chart →

apache/freemarker · GHSA-27j2-h3m2-8237

medium2026-09-09

CVE-2026-88000-Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

View chart →

open-webui/open-webui · GHSA-3cgp-3cqx-j8w2

medium2026-09-09

CVE-2026-88001-Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets

View chart →

open-webui/open-webui · GHSA-5x7x-4c3c-qf5w

medium2026-09-09

CVE-2026-88002-Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

View chart →

open-webui/open-webui · GHSA-jqhh-cjmq-vmv6