CVE-2024-6706

PyPI/open-webui CVE-2024-6706: medium 6.1

Open WebUI Stored Cross-Site Scripting Vulnerability

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-5jp3-wp5v-5363
• https://nvd.nist.gov/vuln/detail/CVE-2024-6706
• https://github.com/open-webui/open-webui
• https://korelogic.com/Resources/Advisories/KL-001-2024-005.txt

CVE-2024-6706 · published 2024-08-08T00:31:44Z · modified 2026-07-07T17:56:08.335868068Z · JSON

PyPI/open-webui CVE-2024-6706: medium 6.1

Open WebUI Stored Cross-Site Scripting Vulnerability

Action: Upgrade open-webui to 0.3.14 or later.

pip install open-webui==0.3.14

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1722
• https://nvd.nist.gov/vuln/detail/CVE-2024-6706
• https://github.com/open-webui/open-webui
• https://korelogic.com/Resources/Advisories/KL-001-2024-005.txt
• https://pypi.org/project/open-webui
• https://github.com/advisories/GHSA-5jp3-wp5v-5363

CVE-2024-6706 · published 2026-07-07T14:34:38.600149Z · modified 2026-07-23T09:45:09.956589670Z · JSON