HIGH 7.5
GHSA-w466-2wfc-8g58
Open WebUI has vulnerable dependency on starlette via fastapi
상세
In version 0.3.32 of open-webui, the application uses a vulnerable version of the starlette package through its dependency on fastapi. The starlette package versions <=0.49 are susceptible to uncontrolled resource consumption, which can be exploited to cause a denial of service through memory exhaustion. This issue is addressed in fastapi version 0.115.3.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
PyPI / open-webui
최초 영향 버전:
0 No fixed version published yet for open-webui (pip). Pin to a known-safe version or switch to an alternative.