Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-8759xiandafu beetl SpELFunction SpELFunction.java expression language injectionMaven · com.ibeetl:beetl-spring-classic
- CVE-2026-8754AstrBotDevs AstrBot File Upload chat.py post_file path traversalPyPI · astrbot · fixed in 4.23.6
- CVE-2026-8723qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnlynpm · qs · fixed in 6.15.2
- CVE-2026-8657Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/fornpm · jsondiffpatch · fixed in 0.7.6
- CVE-2026-45338Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)PyPI · open-webui · fixed in 0.9.0
- CVE-2026-44549Open WebUI: Stored XSS in excel file previewPyPI · open-webui · fixed in 0.8.0
- CVE-2026-45299Open WebUI: Stored Cross-Site Scripting In Profile PicturePyPI · open-webui · fixed in 0.8.0
- CVE-2026-45665Open WebUI: Stored XSS in Banner Component via Improper Sanitization Ordernpm · open-webui · fixed in 0.8.0
- CVE-2026-45667Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)PyPI · open-webui · fixed in 0.8.0
- CVE-2026-44565Open WebUI: Open WebUI Arbitrary File Write, Delete via Path TraversalPyPI · open-webui · fixed in 0.6.10
- CVE-2026-45314Open WebUI: XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/imagePyPI · open-webui · fixed in 0.9.3
- CVE-2026-45316Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)PyPI · open-webui · fixed in 0.9.3
- CVE-2026-45317Open WebUI: Cross-Site Request Forgery (CSRF) via Image URL ManipulationPyPI · open-webui · fixed in 0.9.3
- CVE-2026-45318Open WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)PyPI · open-webui · fixed in 0.9.3
- CVE-2026-45315Open WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptionsPyPI · open-webui · fixed in 0.9.3
- CVE-2026-44571Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read PermissionPyPI · open-webui · fixed in 0.8.6
- CVE-2026-45350Open WebUI: Chat completion API allows tool restrictions to be bypassedPyPI · open-webui · fixed in 0.8.6
- CVE-2026-45303Open WebUI: Stored XSS via the HTML renedering viewPyPI · open-webui · fixed in 0.6.5
- CVE-2026-45301Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded filePyPI · open-webui · fixed in 0.3.16
- CVE-2026-45345Open WebUI: Missing authorization check at the model update function - models from other users can be updatedPyPI · open-webui · fixed in 0.5.7
- CVE-2026-45346Open WebUI: Stored Cross-Site Scripting in SVG Renderernpm · open-webui · fixed in 0.6.31
- CVE-2026-45347Open WebUI: Blind server side request forgery (SSRF) via the PDF generate functionPyPI · open-webui · fixed in 0.5.11
- CVE-2026-45351Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]PyPI · open-webui · fixed in 0.8.9
- CVE-2026-45666Open WebUI: Indirect Object Reference (IDOR) in user notesPyPI · open-webui · fixed in 0.8.11
- CVE-2026-45365Open WebUI: Authenticated users can bypass model access control via exposed query parameterPyPI · open-webui · fixed in 0.8.11
- CVE-2026-44570Open WebUI: Inconsistent authorization controls within memories APIPyPI · open-webui · fixed in 0.6.19
- CVE-2026-44569Open WebUI: Insecure Message Access Breaks AuthorizationPyPI · open-webui · fixed in 0.6.19
- CVE-2026-44566Open WebUI: Arbitrary File Upload and Path TraversalPyPI · open-webui · fixed in 0.1.124
- CVE-2026-44567Open WebUI: Open WebUI Improper Authorization ControlPyPI · open-webui · fixed in 0.1.124
- CVE-2026-45672Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassedPyPI · open-webui · fixed in 0.8.12