All vulnerabilities

Servers and applications

GHSA-3vvh-g22g-jq6r

Channel members can post messages shown as a webhook via client-supplied message metadata

Severity
Medium 4.3
Published
18 Oct 2026
Last changed
18 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
0.12.2
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Open WebUIServers and applications · github:open-webui/open-webui
  • From 0.7.0 before 0.12.2

References