RepoJournal
Open WebUI @open-webui
73 wires and counting

$ follow Open WebUI

Keep up with Open WebUI in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-25
stories 21
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Web fetch filter fix, note access checks, loader settings honored

By RepoJournal · Filed · About Open WebUI

Classic298
1 person shipped this
Classic298 @Classic298 5 cited

Open WebUI shipped fixes for a fetch-blocking filter bug, unchecked note access, ignored Admin UI loader settings, and a security doc realignment.

A malformed WEB_FETCH_FILTER_LIST entry could block all web fetches. Docker compose passes quotes verbatim, so an empty value became the filter entry '""', which landed in the allow list and made every host fail the match. The fix normalizes such entries so an empty filter list does not disable fetching [1].

get_accessible_folder_files now access-checks `note` entries when building __model_knowledge__. Previously `file` and `collection` entries were validated but notes passed through unchecked, potentially exposing notes the caller could not read [2]. Separate fixes ensure Admin UI web loader settings take effect: get_web_loader now consults web.loader.engine from the config table instead of only the environment constant, so the Selected engine is honored rather than always falling back to SafeWebBaseLoader [3]. The security policy doc now frames the project's ownership more formally, addressing how enterprise evaluators and researchers perceive response-time language [4].

Also, de-DE translations were completed [5].

Action items

References

  1. [1] fix: malformed WEB_FETCH_FILTER_LIST entry blocking all web fetches (#26910) ↗ open-webui/open-webui
  2. [2] fix: access-check note entries in get_accessible_folder_files (#26739) ↗ open-webui/open-webui
  3. [3] fix: honor Admin UI web loader settings in get_web_loader (#26749) ↗ open-webui/open-webui
  4. [4] docs: align security policy framing with project ownership (#27431) ↗ open-webui/open-webui
  5. [5] i18n: complete de-DE translations ↗ open-webui/open-webui

$ ls open-webui/reviews/ # the step-back reads

the week in review Open WebUI 0.11.2 ships as nine security advisories land the month in review Open WebUI 0.11.1 adds tool approval, 0.11.2 fixes
Topics: Local LLMs AI / ML Full archive →

Quick answers

What shipped in Open WebUI on July 25, 2026?
Open WebUI shipped fixes for a fetch-blocking filter bug, unchecked note access, ignored Admin UI loader settings, and a security doc realignment. In total, 13 commits and 8 pull requests landed.
Who contributed to Open WebUI on July 25, 2026?
1 developer shipped this update, including Classic298.
What were the notable Open WebUI updates?
fix: malformed WEB_FETCH_FILTER_LIST entry blocking all web fetches (#26910), fix: access-check note entries in get_accessible_folder_files (#26739), and fix: honor Admin UI web loader settings in get_web_loader (#26749).
♥

$ log @open-webui --recent

Open WebUI ships five security fixes for auth and request handling 8 shipped Four breaking security advisories expose data and enable account takeover in Open WebUI 17 shipped Open WebUI 0.11.2 ships with tool parsing fix 90 shipped Fixes Redis Cluster stop, German catalog drift 8 shipped

$ log --all # elsewhere on the wire

@golang Fast-path receive buffer cleared on stream reset Meta React Native adds Stable API guards to renderer attributed string

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.