- How many CVEs does Open WebUI have?
- Open WebUI has 176 published CVE records since 2024, including 171 in the last two years.
- How many Open WebUI CVEs are in CISA KEV?
- None of Open WebUI's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which Open WebUI products have the most CVEs?
- The Open WebUI products with the most published CVEs are open-webui, Open WebUI, open-webui/open-webui, open-webu.
- What are the most common weakness types in Open WebUI CVEs?
- Open WebUI's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-918 (Server-Side Request Forgery (SSRF)).
- Are there public exploits for Open WebUI vulnerabilities?
- Yes — 150 of Open WebUI's CVEs have a known public exploit.
- How many critical Open WebUI vulnerabilities are there?
- Open WebUI has 6 critical and 81 high-severity CVEs.
- What is the average severity of Open WebUI CVEs?
- The average CVSS base score across Open WebUI's scored CVEs is 6.6.