Skip to content

Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

Moderate severity GitHub Reviewed Published Jul 2, 2026 in open-webui/open-webui • Updated Jul 24, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts