Log in Start free

wandb

Products

ProductCVEsExploitedLatest
OpenUI4–Mar 28, 2026
wandb/openui2–Mar 20, 2025
wandb1–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-91771 High 8.8 Weights & Biases wandb before 0.29.0 Path Traversal via File Download 1.2%
  • CVE-2026-4995 Low 3.5 wandb OpenUI Window Message Event index.html cross site scripting 0.2%
  • CVE-2026-4994 Low 3.5 wandb OpenUI APIStatusError server.py generic_exception_handler information exposure 0.2%
  • CVE-2026-4993 Low 3.3 wandb OpenUI config.py hard-coded credentials 0.1%
  • CVE-2026-4992 Medium 4.3 wandb OpenUI HTMLAnnotator server.py get_share HTML injection 0.3%
  • CVE-2025-0192 Medium 5.4 Stored Cross-site Scripting (XSS) in wandb/openui 0.3%
  • CVE-2024-10649 Medium 6.1 Unauthenticated File Upload in wandb/openui 0.3%