repository icon
wandb / openui Project repository

OpenUI let's you describe UI using your imagination, then see it rendered live.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN36 DAYS

FIX

WITHINN/A DAYS

Sensitive Information Disclosure (API Key Leak) via Improper Validation of OPENU...
nusedsec
pending
Broken Session Invalidation - Logged-out session IDs remain valid and allow full...
k1rnt
pending
xss in openui.fly.dev
sumeet-darekar
self closed
Missing OAuth State Parameter Leading to CSRF (Cross-Site Request Forgery) Vulne...
sumeet-darekar
pending
XSS in the edit HTML
alfinj0se
Medium
•$50•CVE-2025-0192
Xss in chat message
ngostuan
not applicable
Unauthenticated File Upload in AWS S3 bucket Leading to Information leak,Stored...
winters0x64
Medium
•$50•CVE-2024-10649
Unauthenticated File Upload in AWS S3 bucket Leading to Information leak,Stored...
winters0x64
not applicable
XSS in the edit HTML
alfinj0se
not applicable
Cross origin resource sharing allows interaction from arbitrary origin
lager1
informative
Medium
Path traversal at api `/{full_path:path}`
ngductung
self closed