Description
In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A maliciously crafted markdown payload can cause the server to spend excessive time converting it, leading to a denial of service. The server becomes unresponsive to other requests until the conversion is complete.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| open-webui | open-webui/open-webui | unspecified – ≤ latest | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | open-webui | <= 0.3.8 | — | GHSA-5v9m-57mq-qc75 |
| PyPI | open-webui | < 0.5.13 | 0.5.13 | PYSEC-2026-1723 |