Description
Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the context of the web page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Open WebUI | Open WebUI | 0.1.105 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | open-webui | < 0.3.14 | 0.3.14 | GHSA-5jp3-wp5v-5363 |
References
- https://korelogic.com/Resources/Advisories/KL-001-2024-005.txt third-party-advisory