Classic298 b0fa4384ea fix: cache path traversal via sibling-prefix bypass in serve_cache_file (#25086) ... serve_cache_file gated the resolved path with file_path.startswith(os.path.abspath(CACHE_DIR)) without a trailing os.sep, so any path resolving to a sibling whose name starts with the cache-dir basename (e.g. cache_backup, cached_models) passed the prefix check. Authenticated users could read files from such siblings via /cache/../<sibling>/<file>. Appending os.sep to the prefix closes the bypass; deep traversal and absolute paths were already correctly blocked. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-06-01 10:17:02 -07:00
..
data	refac: mv backend files to /open_webui dir	2024-09-04 16:54:48 +02:00
open_webui	fix: cache path traversal via sibling-prefix bypass in serve_cache_file (#25086)	2026-06-01 10:17:02 -07:00
.dockerignore	fix: litellm config issue	2024-02-24 22:35:11 -08:00
.gitignore	refac	2024-09-06 04:59:20 +02:00
dev.sh	refac	2026-03-24 19:43:30 -05:00
requirements-min.txt	refac	2026-04-24 18:20:10 +09:00
requirements.txt	refactor(firecrawl): use v2 API directly (#23934)	2026-04-24 18:32:08 +09:00
start.sh	fix: default optional env vars used with bash ,, in start.sh (#24683)	2026-05-15 09:29:25 +09:00
start_windows.bat	refac	2026-04-24 15:40:02 +09:00