[PR #15088] [CLOSED] Fix: Vitest RCE Vulnerability #39341

New Issue

GiteaMirror · 2026-04-25T11:58:10-05:00

GiteaMirror commented

2026-04-25 11:58:10 -05:00

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/15088
Author: @leonardoveic
Created: 6/17/2025
Status: ❌ Closed

Base: main ← Head: issue-12/upgrade-vitest-fix-rce-vulnerability

📝 Commits (10+)

b16eadb Make groups owned by company
847ad23 Small permission bugfix, don't sort groups on retrieval
0fd909c User permissions new defaults
2f5502d Add permissions menu to gropups, remove from group
61bacb2 Replace chat logo with company logo based on company settings
89ec2d1 Add invite in a group functionality
7c99624 Backend refactoring (1)
7ca6a44 Backend refactoring (2)
64428b0 Allow to create groups and assign users to groups in invite
decbfce Fix company settings model control

📊 Changes

374 files changed (+27223 additions, -5519 deletions)

View changed files

➖ .github/workflows/build-release.yml (+0 -72)
➖ .github/workflows/codespell.disabled (+0 -25)
➖ .github/workflows/deploy-to-hf-spaces.yml (+0 -63)
➕ .github/workflows/docker-build-push.yml (+240 -0)
➖ .github/workflows/docker-build.yaml (+0 -477)
➖ .github/workflows/format-backend.yaml (+0 -39)
➖ .github/workflows/format-build-frontend.yaml (+0 -57)
➖ .github/workflows/integration-test.disabled (+0 -255)
➖ .github/workflows/lint-backend.disabled (+0 -27)
➖ .github/workflows/lint-frontend.disabled (+0 -21)
➖ .github/workflows/release-pypi.yml (+0 -32)
📝 .gitignore (+1 -0)
📝 Dockerfile (+4 -1)
➕ backend/beyond_the_loop/dev.sh (+12 -0)
📝 backend/beyond_the_loop/models/auths.py (+51 -9)
➕ backend/beyond_the_loop/models/companies.py (+328 -0)
➕ backend/beyond_the_loop/models/completions.py (+90 -0)
📝 backend/beyond_the_loop/models/groups.py (+7 -11)
➕ backend/beyond_the_loop/models/model_costs.py (+87 -0)
➕ backend/beyond_the_loop/models/models.py (+401 -0)

...and 80 more files

📄 Description

No description provided

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/15088 **Author:** [@leonardoveic](https://github.com/leonardoveic) **Created:** 6/17/2025 **Status:** ❌ Closed **Base:** `main` ← **Head:** `issue-12/upgrade-vitest-fix-rce-vulnerability` --- ### 📝 Commits (10+) - [`b16eadb`](https://github.com/open-webui/open-webui/commit/b16eadbfc965421664e94011dbc6681b9a543459) Make groups owned by company - [`847ad23`](https://github.com/open-webui/open-webui/commit/847ad2397b229c820b74affd89af411018dcecd6) Small permission bugfix, don't sort groups on retrieval - [`0fd909c`](https://github.com/open-webui/open-webui/commit/0fd909c0f02f77bcbc67a35d1fef5ba437b67212) User permissions new defaults - [`2f5502d`](https://github.com/open-webui/open-webui/commit/2f5502da3ccf9cf6f3644e9d3e9b0f0ade07ea6b) Add permissions menu to gropups, remove from group - [`61bacb2`](https://github.com/open-webui/open-webui/commit/61bacb21738a3717e1e067b5e7cd90560c68eae3) Replace chat logo with company logo based on company settings - [`89ec2d1`](https://github.com/open-webui/open-webui/commit/89ec2d164fc086649a744b7a5a04096aeaae9ae7) Add invite in a group functionality - [`7c99624`](https://github.com/open-webui/open-webui/commit/7c99624a6315dcfa1ec58f0a0a3dfd824bfb77de) Backend refactoring (1) - [`7ca6a44`](https://github.com/open-webui/open-webui/commit/7ca6a44f0044f18632bb08a35bc8a6e3af43b23b) Backend refactoring (2) - [`64428b0`](https://github.com/open-webui/open-webui/commit/64428b0d6dfcf3f8c9e1c0b99339a0009324bb38) Allow to create groups and assign users to groups in invite - [`decbfce`](https://github.com/open-webui/open-webui/commit/decbfce255465f77cb853a4c95462a2d65866208) Fix company settings model control ### 📊 Changes **374 files changed** (+27223 additions, -5519 deletions) <details> <summary>View changed files</summary> ➖ `.github/workflows/build-release.yml` (+0 -72) ➖ `.github/workflows/codespell.disabled` (+0 -25) ➖ `.github/workflows/deploy-to-hf-spaces.yml` (+0 -63) ➕ `.github/workflows/docker-build-push.yml` (+240 -0) ➖ `.github/workflows/docker-build.yaml` (+0 -477) ➖ `.github/workflows/format-backend.yaml` (+0 -39) ➖ `.github/workflows/format-build-frontend.yaml` (+0 -57) ➖ `.github/workflows/integration-test.disabled` (+0 -255) ➖ `.github/workflows/lint-backend.disabled` (+0 -27) ➖ `.github/workflows/lint-frontend.disabled` (+0 -21) ➖ `.github/workflows/release-pypi.yml` (+0 -32) 📝 `.gitignore` (+1 -0) 📝 `Dockerfile` (+4 -1) ➕ `backend/beyond_the_loop/dev.sh` (+12 -0) 📝 `backend/beyond_the_loop/models/auths.py` (+51 -9) ➕ `backend/beyond_the_loop/models/companies.py` (+328 -0) ➕ `backend/beyond_the_loop/models/completions.py` (+90 -0) 📝 `backend/beyond_the_loop/models/groups.py` (+7 -11) ➕ `backend/beyond_the_loop/models/model_costs.py` (+87 -0) ➕ `backend/beyond_the_loop/models/models.py` (+401 -0) _...and 80 more files_ </details> ### 📄 Description _No description provided_ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-04-25 11:58:10 -05:00

GiteaMirror closed this issue

2026-04-25 11:58:11 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#39341