High, CVSS 8.5
Open WebUI has a Server-Side Request Forgery (SSRF) bypass in validate_url
PyPI open-webui · Upgrade to 0.9.5 or later · <= 0.9.4 · CVE-2026-45400 · GHSA-8w7q-q5jp-jvgx · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
- Critical
- 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Open WebUI has a Server-Side Request Forgery (SSRF) bypass in
- High, CVSS 7.1
Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-45399 · GHSA-8jjp-r2w2-4v22 · amended
- High, CVSS 7.5
Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls
PyPI open-webui · Upgrade to 0.9.5 or later · <= 0.9.4 · CVE-2026-45398 · GHSA-4g37-7p2c-38r9 · amended
- High, CVSS 7.2
Open WebUI: Missing
workspace.toolsAuthorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Executionnpm open-webui · Upgrade to 0.9.5 or later · < 0.9.5 · CVE-2026-45395 · GHSA-p4fx-23fq-jfg6 · amended
- High, CVSS 7.1
Open WebUI's chat completion API allows tool restrictions to be bypassed
PyPI open-webui · Upgrade to 0.8.6 or later · <= 0.8.5 · CVE-2026-45350 · GHSA-4pcg-253r-rf9w · amended
- High, CVSS 7.1
Open WebUI has Broken Access Control for Completions API
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-45349 · GHSA-gfm2-xm6c-37qc · amended
- High, CVSS 7.5
Svelte devalue: DoS via sparse array deserialization
npm devalue · Upgrade to 5.8.1 or later · >= 5.6.3, <= 5.8.0 · CVE-2026-42570 · GHSA-77vg-94rm-hx3p · amended
- High, CVSS 7.7
Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-45338 · GHSA-24c9-2m8q-qhmh · amended
- High, CVSS 8.5
Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-45331 · GHSA-4v7r-f4w8-8972 · amended
- High, CVSS 7.4
Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image
PyPI open-webui · Upgrade to 0.9.3 or later · <= 0.9.2 · CVE-2026-45314 · GHSA-3856-3vxq-m6fc · amended
- High, CVSS 8.7
Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions
PyPI open-webui · Upgrade to 0.9.3 or later · <= 0.9.2 · CVE-2026-45315 · GHSA-m8f9-9whg-f4xr · amended
- High, CVSS 7.7
Open WebUI has stored XSS via the HTML renedering view
PyPI open-webui · Upgrade to 0.6.5 or later · < 0.6.5 · CVE-2026-45303 · GHSA-4vrc-m9ch-6m3r · amended
- High, CVSS 8.1
Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file
PyPI open-webui · Upgrade to 0.3.16 or later · <= 0.3.15 · CVE-2026-45301 · GHSA-r8wh-8m7r-fh33 · amended
- High, CVSS 7.0
ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override
PyPI ethyca-fides · Upgrade to 2.84.5 or later · >= 2.33.0, < 2.84.5 · CVE-2026-44541 · GHSA-5qrq-9645-g5g2 · amended
- Critical, CVSS 9.3
Apostrophe has default XSS via
xmpraw-text passthrough insanitize-htmlnpm sanitize-html · Upgrade to 2.17.4 or later · >= 2.17.3, <= 2.17.3 · CVE-2026-44990 · GHSA-rpr9-rxv7-x643 · amended
- High, CVSS 7.1
Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections
npm @karakeep/sdk · Upgrade to 0.32.0 or later · <= 0.31.0 · GHSA-7rx4-c5vx-g8w3 · amended
- High, CVSS 8.1
go-billy has path traversal vulnerabilities
Go github.com/go-git/go-billy/v6 · Upgrade to 6.0.0-alpha.1 (pre-release) or later · < 6.0.0-alpha.1 · +1 more package · CVE-2026-44973 · GHSA-qw64-3x98-g7q2
- High, CVSS 8.8
PYSEC-2026-41
PyPI diffusers · Upgrade to 0.38.0 or later · < 0.38.0 · CVE-2026-44827 · GHSA-j7w6-vpvq-j3gm
- High, CVSS 7.7
Portainer: JWT accepted in URL query leaks tokens to logs and referers
Go github.com/portainer/portainer · Upgrade to 2.41.0, 2.39.2 or 2.33.8 by release line · >= 2.33.0, < 2.33.8; >= 2.39.0, < 2.39.2; >= 2.40.0, < 2.41.0 · CVE-2026-44883 · GHSA-jvp4-q659-95mj
- Critical, CVSS 9.4
Portainer has an endpoint security bypass via Swarm service create/update
Go github.com/portainer/portainer · Upgrade to 2.41.0, 2.39.2 or 2.33.8 by release line · >= 2.33.0, < 2.33.8; >= 2.39.0, < 2.39.2; >= 2.40.0, < 2.41.0 · CVE-2026-44849 · GHSA-5fxq-qcf3-244w
- High, CVSS 8.1
Portainer's Kubernetes middleware continues after token validation failure, bypassing endpoint authorization
Go github.com/portainer/portainer · Upgrade to 2.33.8 or later · >= 2.33.0, < 2.33.8 · CVE-2026-44882 · GHSA-mgq6-4x29-88r3
- High, CVSS 8.5
Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update
Go github.com/portainer/portainer · Upgrade to 2.41.0, 2.39.2 or 2.33.8 by release line · >= 2.33.0, < 2.33.8; >= 2.39.0, < 2.39.2; >= 2.40.0, < 2.41.0 · CVE-2026-44881 · GHSA-rpgq-m5fp-32wr
- High, CVSS 8.5
Portainer has a bind-mount restriction bypass via HostConfig.Mounts
Go github.com/portainer/portainer · Upgrade to 2.41.0, 2.39.2 or 2.33.8 by release line · >= 2.33.0, < 2.33.8; >= 2.39.0, < 2.39.2; >= 2.40.0, < 2.41.0 · CVE-2026-44850 · GHSA-7fw3-x4r2-g7wc
- Critical, CVSS 9.4
Portainer missing authorization on Docker plugin endpoints, which allows host RCE
Go github.com/portainer/portainer · Upgrade to 2.41.0, 2.39.2 or 2.33.8 by release line · >= 2.33.0, < 2.33.8; >= 2.39.0, < 2.39.2; >= 2.40.0, < 2.41.0 · CVE-2026-44848 · GHSA-rrmm-9v76-h3p4
- High, CVSS 7.7
FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46480 · GHSA-wxrr-jp8m-qq7f · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.