CVE security advisories and vulnerability history for open-webui by pip.
Last updated
pip open-webui has 86 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 74 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting pip open-webui, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of pip open-webui's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of pip open-webui's CVEs are currently listed in CISA's KEV catalog.
Public exploits
74
74 of pip open-webui's CVEs have a known public exploit available.
Browse every pip open-webui version named in a CVE, then pick one to see only the CVEs that affect it.
86 CVEs
Showing 30 of 86
The CWE weakness categories most often found in pip open-webui CVEs. Follow any weakness for its full explanation.
How many pip open-webui CVEs were published each year.
Browse vulnerabilities for other products by pip.
Common questions about pip open-webui vulnerabilities.
pip open-webui has 86 published CVE records since 2024.
None of pip open-webui's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Yes — 74 of pip open-webui's CVEs have a known public exploit.
19 distinct pip open-webui versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
pip open-webui's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-918 (Server-Side Request Forgery (SSRF)).
pip open-webui has 1 critical and 45 high-severity CVEs.
The average CVSS base score across pip open-webui's scored CVEs is 6.7.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new pip open-webui vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
