Skip to content
OpenAdvisories

Product · wandb

OpenUI

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-4992

    wandb OpenUI HTMLAnnotator server.py get_share HTML injection

    A flaw has been found in wandb OpenUI up to 1.0. This affects the function create_share/get_share of the file backend/openui/server.py of the component HTMLAnnotator Component. Executing a manipulation of the argument ID can lead to HTML injection. The attack…

    wandb OpenUI