Skip to content
OpenAdvisories

Vendor

wandb

7 known vulnerabilities.

Products

OpenUI 4 wandb/openui 2 wandb 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-4992

    wandb OpenUI HTMLAnnotator server.py get_share HTML injection

    A flaw has been found in wandb OpenUI up to 1.0. This affects the function create_share/get_share of the file backend/openui/server.py of the component HTMLAnnotator Component. Executing a manipulation of the argument ID can lead to HTML injection. The attack…

    wandb OpenUI
  • Medium 5.4
    CVE-2025-0192

    Stored Cross-site Scripting (XSS) in wandb/openui

    A stored Cross-site Scripting (XSS) vulnerability exists in the latest version of wandb/openui. The vulnerability is present in the edit HTML functionality, where an attacker can inject malicious scripts. When the modified HTML is shared with another user, th…

    wandb wandb/openui
  • Medium 6.1
    CVE-2024-10649

    Unauthenticated File Upload in wandb/openui

    wandb/openui latest commit c945bb859979659add5f490a874140ad17c56a5d contains a vulnerability where unauthenticated endpoints allow file uploads and downloads from an AWS S3 bucket. This can lead to multiple security issues including denial of service, stored …

    wandb wandb/openui