Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
CVE-2026-70492
## Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow inste
2026-08-05 归档
今日共收录 766 条安全情报，包含 0 个 CVE，370 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Open WebUI: DNS Rebinding SSRF Bypass
CVE-2026-54020
## Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-
Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin
CVE-2026-70486
## Summary Any authenticated user with access to a terminal server could get script of their choosing to run in the Open
Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
CVE-2026-70480
## Summary Open WebUI renders `vega` and `vega-lite` fenced code blocks in chat content by building a Vega view in the v
Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
CVE-2026-70479
## Summary With the Playwright web loader enabled, Open WebUI opens user-submitted URLs in a real browser and validates
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an...
CVE-2026-24254
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an ou
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 15.8.7 and iPadOS 15.8.7
iOS 26.3 and iPadOS 26.3
iOS 26.3 and iPadOS 26.3
iOS 18.7.5 and iPadOS 18.7.5
iOS 18.7.5 and iPadOS 18.7.5
iOS 26.2 and iPadOS 26.2
iOS 26.2 and iPadOS 26.2
iOS 18.7.3 and iPadOS 18.7.3
iOS 18.7.3 and iPadOS 18.7.3