npm/open-webui CVE-2025-65959: high 8.7, EPSS 0.24%
Open WebUI Vulnerable to Stored DOM XSS via Note 'Download PDF'
Action: Upgrade open-webui to 0.6.37 or later.
npm i open-webui@0.6.37Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.37 | - |
Fixed versions
| 0.6.37 |
Sources
- osv: GHSA-8wvc-869r-xfqf
- https://github.com/open-webui/open-webui/security/advisories/GHSA-8wvc-869r-xfqf
- https://nvd.nist.gov/vuln/detail/CVE-2025-65959
- https://github.com/open-webui/open-webui/commit/03cc6ce8eb5c055115406e2304fbf7e3338b8dce
- https://github.com/open-webui/open-webui
CVE-2025-65959 · published · modified · JSON