Medium, CVSS 4.8
Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44568 · GHSA-fq3v-xjjx-95rc · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 972 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,080 in the 30 days before.
- Critical
- 67 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
6676–6700 of 30,985 matching · newest first
- Medium, CVSS 5.8
eventsource-encoder vulnerable to SSE event injection via unsanitized
eventandidfieldsnpm eventsource-encoder · Upgrade to 1.0.2 or later · <= 1.0.1 · CVE-2026-44214 · GHSA-m9g3-3g99-mhpx · amended
- Medium, CVSS 6.5
OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured
NuGet opentelemetry.exporter.instana · Upgrade to 1.1.0 or later · <= 1.0.7 · CVE-2026-44213 · GHSA-wfr5-454p-mjc2
- Medium, CVSS 6.8
Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size
Go volcano.sh/volcano · Upgrade to 1.14.2, 1.13.3 or 1.12.4 by release line · < 1.12.4; >= 1.13.0, < 1.13.3; >= 1.14.0, < 1.14.2 · CVE-2026-44247 · GHSA-8wxp-xxp2-rcgx
- High, CVSS 7.5
banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI
PyPI banks · Upgrade to 2.4.2 or later · <= 2.4.1 · CVE-2026-44209 · GHSA-gphh-9q3h-jgpp · amended
- High, CVSS 8.2
@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input
npm @babel/plugin-transform-modules-systemjs · Upgrade to 8.0.0-alpha.13 (pre-release) or 7.29.4 by release line · >= 7.12.0, <= 7.29.3; >= 8.0.0-alpha.0, <= 8.0.0-alpha.12 · CVE-2026-44728 · GHSA-fv7c-fp4j-7gwp · amended
- Medium, CVSS 6.5
Wagtail has improper permission handling when copying pages
PyPI wagtail · Upgrade to 7.3.2 or 7.0.7 by release line · < 7.0.7; >= 7.1, < 7.3.2 · CVE-2026-44200 · GHSA-67rv-mg8q-5pf3 · amended
- Medium, CVSS 5.3
Wagtail has improper restriction handling on Documents and Images API
PyPI wagtail · Upgrade to 7.3.2 or 7.0.7 by release line · < 7.0.7; >= 7.1, < 7.3.2 · CVE-2026-44201 · GHSA-p5gm-92h4-6pv6 · amended
- Medium, CVSS 6.5
Wagtail has improper permission handling when deleting form submissions
PyPI wagtail · Upgrade to 7.3.2 or 7.0.7 by release line · < 7.0.7; >= 7.1, < 7.3.2 · CVE-2026-44199 · GHSA-pwm3-7fv4-g6xx · amended
- Medium, CVSS 4.3
Wagtail has improper permission handling when viewing page history
PyPI wagtail · Upgrade to 7.3.2 or 7.0.7 by release line · < 7.0.7; >= 7.1, < 7.3.2 · CVE-2026-44198 · GHSA-c4mr-889m-vgf6 · amended
- Medium, CVSS 6.5
Wagtail has improper permission handling when comparing revisions
PyPI wagtail · Upgrade to 7.3.2 or 7.0.7 by release line · < 7.0.7; >= 7.1, < 7.3.2 · CVE-2026-44197 · GHSA-c6wj-9vcj-75pj · amended
- Medium, CVSS 6.9
@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry
npm @cyclonedx/cdxgen · Upgrade to 12.3.3 or later · >= 9.9.5, < 12.3.3 · GHSA-qhh4-458h-xwh2 · amended
- Medium, CVSS 6.5
Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44560 · GHSA-h36f-rqpx-j5wx · amended
- Medium, CVSS 5.4
Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44561 · GHSA-hmgr-67hw-j2cq · amended
- Medium, CVSS 5.4
Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44564 · GHSA-vrfh-rj4q-rmhr · amended
- Medium, CVSS 5.4
Open WebUI's Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44563 · GHSA-rcvp-6fgw-c7fh · amended
- Medium, CVSS 6.5
Open WebUI's Model Import Overwrites Any Model Without Ownership Check
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44562 · GHSA-mqq6-cqcx-38vg · amended
- Medium, CVSS 4.3
Open WebUI Missing Access Check on Channel Members Endpoint for Standard Channels
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44559 · GHSA-c7wp-3qh5-55pv · amended
- Medium, CVSS 4.3
Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44557 · GHSA-6c2x-gcp3-gp73 · amended
- High, CVSS 8.1
Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44554 · GHSA-7r82-qhg4-6wvj · amended
- Medium, CVSS 5.4
Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44558 · GHSA-7rjh-px4v-5w55 · amended
- High, CVSS 7.1
Open WebUI's responses passthrough endpoint lacks access control authorization
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44556 · GHSA-hp5m-24vp-vq2q · amended
- High, CVSS 7.6
Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44555 · GHSA-9vvh-qmjx-p4q8 · amended
- High, CVSS 8.7
Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44552 · GHSA-3x8w-4f7p-xxc2 · amended
- High, CVSS 8.1
Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44553 · GHSA-45m8-cpm2-3v65 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.