CVE-2024-8060
2 advisories.
PyPI/open-webui CVE-2024-8060: high 8.1
Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions
Action: Upgrade open-webui to 0.5.17 or later.
pip install open-webui==0.5.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.17 | - |
Fixed versions
| 0.5.17 |
Sources
- osv: GHSA-ff5c-56m7-vc75
- https://nvd.nist.gov/vuln/detail/CVE-2024-8060
- https://github.com/open-webui/open-webui/commit/613a087387c094e71ee91d29c015195ef401e160
- https://github.com/open-webui/open-webui
- https://huntr.com/bounties/a3b1a4b7-c723-496d-842c-844cc0988fe9
CVE-2024-8060 · published · modified · JSON
PyPI/open-webui CVE-2024-8060: high 8.1
Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions
Action: Upgrade open-webui to 0.5.17 or later.
pip install open-webui==0.5.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.17 | - |
Fixed versions
| 0.5.17 |
Sources
- osv: PYSEC-2026-1731
- https://nvd.nist.gov/vuln/detail/CVE-2024-8060
- https://github.com/open-webui/open-webui/commit/613a087387c094e71ee91d29c015195ef401e160
- https://github.com/open-webui/open-webui
- https://huntr.com/bounties/a3b1a4b7-c723-496d-842c-844cc0988fe9
- https://pypi.org/project/open-webui
- https://github.com/advisories/GHSA-ff5c-56m7-vc75
CVE-2024-8060 · published · modified · JSON