Skip to content

Open WebUI has Stored Cross-Site Scripting In Profile Picture

Moderate severity GitHub Reviewed Published May 8, 2026 in open-webui/open-webui • Updated May 19, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts