Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`
High severity
GitHub Reviewed
Published
May 10, 2026
in
open-webui/open-webui
•
Updated May 15, 2026
Give feedback on Dependabot alerts