| Package | Affected versions | Patched versions |
|---|---|---|
| open-webui | < 0.3.14 | 0.3.14 |
| open webui | = 0.1.105 |
Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the context of the web page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free