High
CVE-2026-61595
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-61588
djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client
High
CVE-2026-61592
djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)
High
CVE-2026-61593
djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE session
Medium
CVE-2026-87014
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
Medium
CVE-2026-87015
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
Medium
CVE-2026-88006
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
Medium
CVE-2026-87012
Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value
Critical
CVE-2026-59971
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
Medium
CVE-2026-87013
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
High
CVE-2026-87011
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
Critical
CVE-2026-59178
ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade
High
CVE-2026-61590
djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG
High
CVE-2026-61598
djust: Client mass-assignment of arbitrary view attributes via the default dj-model update_model handler
High
CVE-2026-80047
Hugging Face Transformers downloads custom generation code before trust consent
Critical
CVE-2026-68770
sentence-transformers local model loading bypasses trust_remote_code and executes custom Python
High
CVE-2026-87995
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
Medium
CVE-2026-87017
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
High
CVE-2026-87016
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
Medium
CVE-2026-87994
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint
Medium
CVE-2026-87997
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
High
CVE-2026-87998
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
High
CVE-2026-87996
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
High
CVE-2026-87999
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.