Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w466-2wfc-8g58

Опубликовано: 20 мар. 2025
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Open WebUI has vulnerable dependency on starlette via fastapi

In version 0.3.32 of open-webui, the application uses a vulnerable version of the starlette package through its dependency on fastapi. The starlette package versions <=0.49 are susceptible to uncontrolled resource consumption, which can be exploited to cause a denial of service through memory exhaustion. This issue is addressed in fastapi version 0.115.3.

Пакеты

Наименование

open-webui

pip
Затронутые версииВерсия исправления

<= 0.3.32

Отсутствует

7.5 High

CVSS3

Дефекты

CWE-400

7.5 High

CVSS3

Дефекты

CWE-400