Open WebUI: Cross-origin postMessage confirmation bypass via action:submit
High severity
GitHub Reviewed
Published
Jun 11, 2026
in
open-webui/open-webui
•
Updated Jul 20, 2026
Give feedback on Dependabot alerts