Ghost: Mobiledoc image-size fetch SSRF
CVE-2026-53946
### Impact When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to
#advisory
共收录 23530 条相关情报。
← 返回所有主题Ghost: Server-side request forgery via DNS rebinding in external request handling
CVE-2026-53945
### Impact Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacke
Ghost: Private IP filtering bypass to make server-side requests to internal services
CVE-2026-53944
### Impact When making an external request, it is possible to bypass the IP filter that ensures the request isn't going
Ghost: Archived Offers can be Redeemed
CVE-2026-70589
### Impact A missing validation check allowed users to redeem subscription offers that were no longer active. ### Vuln
Ghost: File Upload Content-Type Spoofing
CVE-2026-53948
### Impact Insufficient validation of the client-supplied `Content-Type` on Ghost's Admin API file upload endpoint allo
Ghost: Cross-Site Scripting in Universal Import
CVE-2026-70588
### Impact The Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in
Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder
CVE-2026-70494
## Summary A user granted write access to a shared chat folder could permanently delete chats and messages belonging to
Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
CVE-2026-70493
## Summary The built-in knowledge search tools let a chat participant choose the pattern used to grep knowledge files. P
Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
CVE-2026-70492
## Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow inste
Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
CVE-2026-70491
## Summary A workspace tool shared with a read grant returned its full Python source to the recipient. Any authenticate
Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check
CVE-2026-70490
## Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP depend
Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
CVE-2026-70489
## Summary In every affected release, automation recurrence parsing anchors minutely and hourly rules at a fixed date of
Open WebUI: DNS Rebinding SSRF Bypass
CVE-2026-54020
## Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-
Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
CVE-2026-70487
## Summary Open WebUI lets a client define a model inline on a chat request instead of selecting a saved workspace model
Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup
CVE-2026-70488
## Summary A user with write access to one knowledge base could delete directories, and drop file embeddings, belonging
Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin
CVE-2026-70486
## Summary Any authenticated user with access to a terminal server could get script of their choosing to run in the Open
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
CVE-2026-70485
## Summary Open WebUI fetches user-supplied URLs on the server for RAG URL ingestion, URL-to-markdown conversion and we
Open WebUI: Users denied the image-generation permission can still generate images via chat completions
CVE-2026-70484
## Summary An authenticated user whose `features.image_generation` permission has been revoked can still make the server
Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
CVE-2026-70480
## Summary Open WebUI renders `vega` and `vega-lite` fenced code blocks in chat content by building a Vega view in the v
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
CVE-2026-70483
## Summary `DELETE /api/v1/chats/{id}` cancelled a chat's in-flight tasks before it checked whether the caller was allow