CGA-8v8f-2fpf-p7gj

Published

Last updated

https://images.chainguard.dev/security/CGA-8v8f-2fpf-p7gj

Package

open-webui

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2025-48379
GHSA-xg8h-j46f-w952

Severity

7.1

High

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2025-48379
https://github.com/advisories/GHSA-xg8h-j46f-w952

Updates

Status

Pending upstream fix

Impact

Any attempts to upgrade pillow to >=11.3.0 result in a build failure, we will need to wait for upstream to update their code and bump the pillow dependency in order to resolve the CVE.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-8v8f-2fpf-p7gj

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company