DirectorySecurity AdvisoriesPricing
/
Sign in
Security Advisories

CGA-j45f-9mqm-43rf

Published

Last updated

https://images.chainguard.dev/security/CGA-j45f-9mqm-43rf
Package

open-webui

RepositoryWolfi
Latest Update
Pending upstream fix
Aliases
  • CVE-2025-66471
  • GHSA-2xpw-w6gg-jr37

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-66471

Updates

Status

Pending upstream fix

Impact

The latest urllib3 package distributed by Pyodide is 2.5.0 (per https://pyodide.org/en/stable/usage/packages-in-pyodide.html). Pyodide will need to release a newer compatible version, and open-webui will need to integrate it.

Status

Under investigation


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing