wandb vulnerabilities
7 published CVEs name wandb among the affected products.
- 7Published CVEs7 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-91771
Weights & Biases wandb before 0.29.0 Path Traversal via File Download
wandb · wandb
High8.7 - CVE-2026-4995
wandb OpenUI Window Message Event index.html cross site scripting
wandb · OpenUI
Medium5.1 - CVE-2026-4994
wandb OpenUI APIStatusError server.py generic_exception_handler information exposure
wandb · OpenUI
Medium5.1 - CVE-2026-4993
wandb OpenUI config.py hard-coded credentials
wandb · OpenUI
Medium4.8 - CVE-2026-4992
wandb OpenUI HTMLAnnotator server.py get_share HTML injection
wandb · OpenUI
Medium5.3 - CVE-2025-0192
Stored Cross-site Scripting (XSS) in wandb/openui
wandb · wandb/openui
Medium5.4 - CVE-2024-10649
Unauthenticated File Upload in wandb/openui
wandb · wandb/openui
Medium6.1