Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.6, <= 0.10.2 · CVE-2026-70488 · GHSA-jxc9-xmc4-gr23
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
3051–3075 of 30,921 matching · newest first
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.6, <= 0.10.2 · CVE-2026-70488 · GHSA-jxc9-xmc4-gr23
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.0, <= 0.10.2 · CVE-2026-70486 · GHSA-3xpf-xq7r-v8c5
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.0, < 0.11.0 · CVE-2026-70485 · GHSA-8x5v-cpv7-8jjp
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.7.0, < 0.11.0 · CVE-2026-70484 · GHSA-g423-grf7-98rv
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.6.34, < 0.11.0 · CVE-2026-70480 · GHSA-rffm-9q57-q649
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.6, < 0.11.0 · CVE-2026-70483 · GHSA-3vf6-64vr-3g56
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.8.0, < 0.11.0 · CVE-2026-70482 · GHSA-rq84-p6rr-vf89
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.5.0, <= 0.10.2 · CVE-2026-70481 · GHSA-mj5r-jf49-m3w7
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.6, < 0.11.0 · CVE-2026-70479 · GHSA-w2rx-84hp-gg95
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70478 · GHSA-qgvm-j2hm-6m38 · amended
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-70477 · GHSA-5xvg-pmgg-3mxr · amended
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70476 · GHSA-gmmw-qg98-6j6p
npm flowise · Upgrade to 3.1.4 or later · <= 3.1.3 · GHSA-8gj2-2cvc-6xx7
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70475 · GHSA-fm2f-4339-4p2f
PyPI django · Upgrade to 6.1.1, 6.0.8 or 5.2.17 by release line · < 5.2.17; >= 6.0a1, < 6.0.8; >= 6.1a1, < 6.1.1 · CVE-2026-15830 · GHSA-q238-5cxm-5c9h
PyPI django · Upgrade to 6.0.8 or 5.2.17 by release line · < 5.2.17; >= 6.0a1, < 6.0.8 · CVE-2026-15307 · GHSA-wvqv-fj8w-qmhm
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70474 · GHSA-wch5-xp77-fxg4
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · GHSA-rwrp-9823-p2xq
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70473 · GHSA-fr6g-7cq8-fg82
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70472 · GHSA-chm3-vqcf-52rx
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69264 · GHSA-4j8x-x6v7-w9rq · amended
S3 Directory document loader via unsanitized S3 object keysnpm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · GHSA-88pr-878c-24wf
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70471 · GHSA-8r8h-6vcc-xhrv
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-70470 · GHSA-52fh-8v99-63c2 · amended
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69263 · GHSA-xc48-889x-5qmw
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.