github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-07-28 17:59:25 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

[PR #15088] [CLOSED] Fix: Vitest RCE Vulnerability #10508

New Issue
Closed
opened 2025-11-11 19:06:46 -06:00 by GiteaMirror · 0 comments
GiteaMirror commented 2025-11-11 19:06:46 -06:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/15088
Author: @leonardoveic
Created: 6/17/2025
Status: ❌ Closed

Base: main ← Head: issue-12/upgrade-vitest-fix-rce-vulnerability

📝 Commits (10+)

  • b16eadb Make groups owned by company
  • 847ad23 Small permission bugfix, don't sort groups on retrieval
  • 0fd909c User permissions new defaults
  • 2f5502d Add permissions menu to gropups, remove from group
  • 61bacb2 Replace chat logo with company logo based on company settings
  • 89ec2d1 Add invite in a group functionality
  • 7c99624 Backend refactoring (1)
  • 7ca6a44 Backend refactoring (2)
  • 64428b0 Allow to create groups and assign users to groups in invite
  • decbfce Fix company settings model control

📊 Changes

374 files changed (+27223 additions, -5519 deletions)

View changed files

➖ .github/workflows/build-release.yml (+0 -72)
➖ .github/workflows/codespell.disabled (+0 -25)
➖ .github/workflows/deploy-to-hf-spaces.yml (+0 -63)
➕ .github/workflows/docker-build-push.yml (+240 -0)
➖ .github/workflows/docker-build.yaml (+0 -477)
➖ .github/workflows/format-backend.yaml (+0 -39)
➖ .github/workflows/format-build-frontend.yaml (+0 -57)
➖ .github/workflows/integration-test.disabled (+0 -255)
➖ .github/workflows/lint-backend.disabled (+0 -27)
➖ .github/workflows/lint-frontend.disabled (+0 -21)
➖ .github/workflows/release-pypi.yml (+0 -32)
📝 .gitignore (+1 -0)
📝 Dockerfile (+4 -1)
➕ backend/beyond_the_loop/dev.sh (+12 -0)
📝 backend/beyond_the_loop/models/auths.py (+51 -9)
➕ backend/beyond_the_loop/models/companies.py (+328 -0)
➕ backend/beyond_the_loop/models/completions.py (+90 -0)
📝 backend/beyond_the_loop/models/groups.py (+7 -11)
➕ backend/beyond_the_loop/models/model_costs.py (+87 -0)
➕ backend/beyond_the_loop/models/models.py (+401 -0)

...and 80 more files

📄 Description

No description provided

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/15088 **Author:** [@leonardoveic](https://github.com/leonardoveic) **Created:** 6/17/2025 **Status:** ❌ Closed **Base:** `main` ← **Head:** `issue-12/upgrade-vitest-fix-rce-vulnerability` --- ### 📝 Commits (10+) - [`b16eadb`](https://github.com/open-webui/open-webui/commit/b16eadbfc965421664e94011dbc6681b9a543459) Make groups owned by company - [`847ad23`](https://github.com/open-webui/open-webui/commit/847ad2397b229c820b74affd89af411018dcecd6) Small permission bugfix, don't sort groups on retrieval - [`0fd909c`](https://github.com/open-webui/open-webui/commit/0fd909c0f02f77bcbc67a35d1fef5ba437b67212) User permissions new defaults - [`2f5502d`](https://github.com/open-webui/open-webui/commit/2f5502da3ccf9cf6f3644e9d3e9b0f0ade07ea6b) Add permissions menu to gropups, remove from group - [`61bacb2`](https://github.com/open-webui/open-webui/commit/61bacb21738a3717e1e067b5e7cd90560c68eae3) Replace chat logo with company logo based on company settings - [`89ec2d1`](https://github.com/open-webui/open-webui/commit/89ec2d164fc086649a744b7a5a04096aeaae9ae7) Add invite in a group functionality - [`7c99624`](https://github.com/open-webui/open-webui/commit/7c99624a6315dcfa1ec58f0a0a3dfd824bfb77de) Backend refactoring (1) - [`7ca6a44`](https://github.com/open-webui/open-webui/commit/7ca6a44f0044f18632bb08a35bc8a6e3af43b23b) Backend refactoring (2) - [`64428b0`](https://github.com/open-webui/open-webui/commit/64428b0d6dfcf3f8c9e1c0b99339a0009324bb38) Allow to create groups and assign users to groups in invite - [`decbfce`](https://github.com/open-webui/open-webui/commit/decbfce255465f77cb853a4c95462a2d65866208) Fix company settings model control ### 📊 Changes **374 files changed** (+27223 additions, -5519 deletions) <details> <summary>View changed files</summary> ➖ `.github/workflows/build-release.yml` (+0 -72) ➖ `.github/workflows/codespell.disabled` (+0 -25) ➖ `.github/workflows/deploy-to-hf-spaces.yml` (+0 -63) ➕ `.github/workflows/docker-build-push.yml` (+240 -0) ➖ `.github/workflows/docker-build.yaml` (+0 -477) ➖ `.github/workflows/format-backend.yaml` (+0 -39) ➖ `.github/workflows/format-build-frontend.yaml` (+0 -57) ➖ `.github/workflows/integration-test.disabled` (+0 -255) ➖ `.github/workflows/lint-backend.disabled` (+0 -27) ➖ `.github/workflows/lint-frontend.disabled` (+0 -21) ➖ `.github/workflows/release-pypi.yml` (+0 -32) 📝 `.gitignore` (+1 -0) 📝 `Dockerfile` (+4 -1) ➕ `backend/beyond_the_loop/dev.sh` (+12 -0) 📝 `backend/beyond_the_loop/models/auths.py` (+51 -9) ➕ `backend/beyond_the_loop/models/companies.py` (+328 -0) ➕ `backend/beyond_the_loop/models/completions.py` (+90 -0) 📝 `backend/beyond_the_loop/models/groups.py` (+7 -11) ➕ `backend/beyond_the_loop/models/model_costs.py` (+87 -0) ➕ `backend/beyond_the_loop/models/models.py` (+401 -0) _...and 80 more files_ </details> ### 📄 Description _No description provided_ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2025-11-11 19:06:46 -06:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No labels pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#10508