Skip to content
OpenAdvisories

Package · npm

open-webui

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-45346

    Open WebUI: Stored Cross-Site Scripting in SVG Renderer

    Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementation. This vulnerability is fixed in 0.6.31.

    open-webui open-webui open-webui npm