Skip to content

Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web

High severity GitHub Reviewed Published Dec 4, 2025 in open-webui/open-webui • Updated Dec 4, 2025

No open alerts for this advisory

Give feedback on Dependabot alerts