Classic298 12585a3851 chore: bump Brotli to 1.2.1 and brotlicffi to 1.2.1.0 (#33073) ... Fixes CVE-2026-111497 (the "Node2Shell"/"HTTP2Shell" Brotli decoder flaw). Open WebUI decodes Brotli responses automatically whenever it fetches from a model provider, a tool server or a web page, so a malicious server could hand it a crafted response that hits the vulnerable decoder. Both packages now use the fixed releases.		2026-10-25 04:49:42 +09:00
..
data	refac: mv backend files to /open_webui dir	2024-09-04 16:54:48 +02:00
open_webui	fix: tool server tools change their schema on every restart and break prompt caching (#33000)	2026-10-25 04:46:48 +09:00
.dockerignore	fix: litellm config issue	2024-02-24 22:35:11 -08:00
.gitignore	refac	2024-09-06 04:59:20 +02:00
dev.sh	perf: allow disabling websocket per-message-deflate (#28613)	2026-08-24 18:46:07 -04:00
requirements-slim.txt	chore: bump Brotli to 1.2.1 and brotlicffi to 1.2.1.0 (#33073)	2026-10-25 04:49:42 +09:00
requirements.txt	chore: bump Brotli to 1.2.1 and brotlicffi to 1.2.1.0 (#33073)	2026-10-25 04:49:42 +09:00
start.sh	chore: Python 3.12 and Debian 13 base image (#32861)	2026-10-22 04:51:57 +09:00
start_windows.bat	chore: drop nltk, unused at the pinned versions (#29725)	2026-09-06 16:39:05 -04:00