open-webui

• CVE-2026-45395 - Open WebUI tool update authorization RCE 2026-05-15
• GHSA-6xcp-7mpr-m7wm - Open WebUI CORS and session RCE chain 2026-05-12