PyPI/open-webui: high 7.5
Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/file
Action: Upgrade open-webui to 0.4.7 or later.
pip install open-webui==0.4.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.7 | - |
Fixed versions
| 0.4.7 |
Sources
- osv: GHSA-6wj5-5pgr-jwq8
- https://github.com/Kludex/python-multipart/security/advisories/GHSA-59g5-xgcq-4qw3
- https://nvd.nist.gov/vuln/detail/CVE-2024-53981
- https://github.com/open-webui/open-webui/commit/f311c03a21dc09e279a0cad7482a68b273517baf
- https://github.com/open-webui/open-webui
- https://huntr.com/bounties/15eb4fbe-70d4-420e-806a-ec6f4ecb7202
published · modified · JSON