Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
Moderate severity
GitHub Reviewed
Published
Jul 2, 2026
in
open-webui/open-webui
•
Updated Jul 24, 2026
Give feedback on Dependabot alerts