OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured

CVE-2026-44213

### Summary The `OpenTelemetry.Exporter.Instana` NuGet package does not validate HTTPS/TLS certificates are valid when

历史摘要 · 未重新核验 · GitHub Advisory

Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size

CVE-2026-44247

### Impact The Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper permission handling when copying pages

CVE-2026-44200

### Impact A CMS user with limited access to pages could copy a page they don't have access to to an area of the site t

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper restriction handling on Documents and Images API

CVE-2026-44201

### Impact The Documents and Images [API](https://docs.wagtail.org/en/stable/advanced_topics/api/index.html) incorrectl

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper permission handling when deleting form submissions

CVE-2026-44199

### Impact A CMS user with limited access to form pages could delete submissions to form pages they don't have access t

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper permission handling when viewing page history

CVE-2026-44198

### Impact A CMS user without the ability to edit a page could still access the history report for the page, potentiall

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper permission handling when comparing revisions

CVE-2026-44197

### Impact A CMS user without the ability to edit a page could access revisions of the page through the revision compar

历史摘要 · 未重新核验 · GitHub Advisory

@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry

# Docker registry auth substring match forwards credentials to a different registry ## Repository `cdxgen/cdxgen` ##

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search

CVE-2026-44560

# Unauthorized File and Knowledge Base Content Access via RAG Vector Search ## Affected Component RAG source resolutio

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels

CVE-2026-44561

# Deactivated Channel Members Retain Full Access to Group/DM Channels ## Affected Component Channel membership authori

历史摘要 · 未重新核验 · GitHub Advisory

Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO

CVE-2026-44564

# Read-Only Users Can Modify Collaborative Documents via Socket.IO ## Affected Component Socket.IO collaborative docum

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show

CVE-2026-44563

# Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show ## Affected Componen

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Model Import Overwrites Any Model Without Ownership Check

CVE-2026-44562

# Model Import Overwrites Any Model Without Ownership Check ## Affected Component Model import endpoint: - `backend/op

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI Missing Access Check on Channel Members Endpoint for Standard Channels

CVE-2026-44559

# Missing Access Check on Channel Members Endpoint for Standard Channels ## Affected Component Channel members listing

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection

CVE-2026-44557

# Global Knowledge Base Enumeration via knowledge-bases Meta-Collection ## Affected Component Retrieval collection acc

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants

CVE-2026-44558

# Channel Access Grants Bypass filter_allowed_access_grants ## Affected Component Channel creation and update endpoint

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts

CVE-2026-44550

# Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts ## Affected Component Fo

历史摘要 · 未重新核验 · GitHub Advisory

Grav: Stored XSS via page title (data[header][title]) in admin panel

CVE-2026-44737

### Summary _A Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the

历史摘要 · 未重新核验 · GitHub Advisory

Bunsink has an SSRF bypass in `validate_webhook_url`

CVE-2026-44502

## Summary Bugsink’s webhook URL validation in versions 2.1.2 and earlier could be (partially) bypassed because of a mi

历史摘要 · 未重新核验 · GitHub Advisory

Electerm's full process.env exposed to renderer via window.pre.env

CVE-2026-43942

### Impact The `getConstants()` IPC handler in `src/app/lib/ipc-sync.js` serialises the entire `process.env` object and

历史摘要 · 未重新核验 · GitHub Advisory