Skip to content

Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image

High severity GitHub Reviewed Published May 9, 2026 in open-webui/open-webui • Updated May 14, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts