DirectorySecurity AdvisoriesPricing
/
Sign in
Security Advisories

CGA-rrjv-gccg-cq2x

Published

Last updated

https://images.chainguard.dev/security/CGA-rrjv-gccg-cq2x
Package

open-webui

RepositoryWolfi
Latest Update
Pending upstream fix
Aliases
  • CVE-2025-66034
  • GHSA-768j-98cg-p3fv

Severity

6.3

Medium

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-66034

Updates

Status

Pending upstream fix

Impact

The latest fonttools package distributed by Pyodide is 4.56.0 (per https://pyodide.org/en/stable/usage/packages-in-pyodide.html). Pyodide will need to release a newer compatible version, and open-webui will need to integrate it.

Status

Under investigation


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing