Adding detection events for open-webui (#28249)

* Adding Advisory GHSA-54jq-c3m8-4m76 for open-webui

* Adding Advisory GHSA-69f9-5gxw-wvc2 for open-webui

* Adding Advisory GHSA-6jhg-hg63-jvvf for open-webui

* Adding Advisory GHSA-6mq8-rvhq-8wgg for open-webui

* Adding Advisory GHSA-fh55-r93g-j68g for open-webui

* Adding Advisory GHSA-g84x-mcqj-x9qq for open-webui

* Adding Advisory GHSA-jj3x-wxrx-4x23 for open-webui

* Adding Advisory GHSA-mqqc-3gqh-h2x8 for open-webui

---------

Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com>

Author: octo-sts[bot]

open-webui.advisories.yaml

@@ -268,6 +268,24 @@ advisories:
         data:
           fixed-version: 0.6.34-r3
 
+  - id: CGA-fv2w-mj69-6xmc
+    aliases:
+      - CVE-2025-69223
+      - GHSA-6mq8-rvhq-8wgg
+    events:
+      - timestamp: 2026-01-06T12:59:32Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: open-webui
+            componentID: a217018cfe2ee26e
+            componentName: aiohttp
+            componentVersion: 3.13.2
+            componentType: python
+            componentLocation: /usr/share/open-webui/lib/python3.11/site-packages/aiohttp-3.13.2.dist-info/METADATA
+            scanner: grype
+
   - id: CGA-g8hp-px9w-7gwr
     aliases:
       - GHSA-m449-cwjh-6pw7
@@ -289,6 +307,60 @@ advisories:
         data:
           fixed-version: 0.6.40-r0
 
+  - id: CGA-gxcf-8845-xc8c
+    aliases:
+      - CVE-2025-69229
+      - GHSA-g84x-mcqj-x9qq
+    events:
+      - timestamp: 2026-01-06T12:59:33Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: open-webui
+            componentID: a217018cfe2ee26e
+            componentName: aiohttp
+            componentVersion: 3.13.2
+            componentType: python
+            componentLocation: /usr/share/open-webui/lib/python3.11/site-packages/aiohttp-3.13.2.dist-info/METADATA
+            scanner: grype
+
+  - id: CGA-h6c6-hqp6-f5g3
+    aliases:
+      - CVE-2025-69224
+      - GHSA-69f9-5gxw-wvc2
+    events:
+      - timestamp: 2026-01-06T12:59:31Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: open-webui
+            componentID: a217018cfe2ee26e
+            componentName: aiohttp
+            componentVersion: 3.13.2
+            componentType: python
+            componentLocation: /usr/share/open-webui/lib/python3.11/site-packages/aiohttp-3.13.2.dist-info/METADATA
+            scanner: grype
+
+  - id: CGA-hp4p-rvh5-mf3f
+    aliases:
+      - CVE-2025-69230
+      - GHSA-fh55-r93g-j68g
+    events:
+      - timestamp: 2026-01-06T12:59:32Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: open-webui
+            componentID: a217018cfe2ee26e
+            componentName: aiohttp
+            componentVersion: 3.13.2
+            componentType: python
+            componentLocation: /usr/share/open-webui/lib/python3.11/site-packages/aiohttp-3.13.2.dist-info/METADATA
+            scanner: grype
+
   - id: CGA-j22w-9fw9-v4vm
     aliases:
       - CVE-2025-54121
@@ -333,6 +405,24 @@ advisories:
         data:
           note: The latest urllib3 package distributed by Pyodide is 2.5.0 (per https://pyodide.org/en/stable/usage/packages-in-pyodide.html). Pyodide will need to release a newer compatible version, and open-webui will need to integrate it.
 
+  - id: CGA-m8cw-3xrc-pq3p
+    aliases:
+      - CVE-2025-69227
+      - GHSA-jj3x-wxrx-4x23
+    events:
+      - timestamp: 2026-01-06T12:59:33Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: open-webui
+            componentID: a217018cfe2ee26e
+            componentName: aiohttp
+            componentVersion: 3.13.2
+            componentType: python
+            componentLocation: /usr/share/open-webui/lib/python3.11/site-packages/aiohttp-3.13.2.dist-info/METADATA
+            scanner: grype
+
   - id: CGA-mmqg-f57g-9jcp
     aliases:
       - CVE-2025-3730
@@ -421,6 +511,24 @@ advisories:
         data:
           note: Bumping aiohttp to 3.12.14+ causes build failures. No upstream PRs currently address this incompatibility. Upstream maintainers must implement changes to accommodate aiohttp 3.12.14+ before this CVE can be resolved.
 
+  - id: CGA-pv6h-3mvc-3x7v
+    aliases:
+      - CVE-2025-69228
+      - GHSA-6jhg-hg63-jvvf
+    events:
+      - timestamp: 2026-01-06T12:59:31Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: open-webui
+            componentID: a217018cfe2ee26e
+            componentName: aiohttp
+            componentVersion: 3.13.2
+            componentType: python
+            componentLocation: /usr/share/open-webui/lib/python3.11/site-packages/aiohttp-3.13.2.dist-info/METADATA
+            scanner: grype
+
   - id: CGA-pxpq-4523-7gg6
     aliases:
       - CVE-2024-23342
@@ -465,6 +573,24 @@ advisories:
         data:
           fixed-version: 0.6.34-r2
 
+  - id: CGA-qfcj-96fx-f3v2
+    aliases:
+      - CVE-2025-69225
+      - GHSA-mqqc-3gqh-h2x8
+    events:
+      - timestamp: 2026-01-06T12:59:34Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: open-webui
+            componentID: a217018cfe2ee26e
+            componentName: aiohttp
+            componentVersion: 3.13.2
+            componentType: python
+            componentLocation: /usr/share/open-webui/lib/python3.11/site-packages/aiohttp-3.13.2.dist-info/METADATA
+            scanner: grype
+
   - id: CGA-qg34-qp8g-rhvg
     aliases:
       - CVE-2025-50182
@@ -509,6 +635,24 @@ advisories:
         data:
           note: The latest fonttools package distributed by Pyodide is 4.56.0 (per https://pyodide.org/en/stable/usage/packages-in-pyodide.html). Pyodide will need to release a newer compatible version, and open-webui will need to integrate it.
 
+  - id: CGA-vg7j-gwvp-hh92
+    aliases:
+      - CVE-2025-69226
+      - GHSA-54jq-c3m8-4m76
+    events:
+      - timestamp: 2026-01-06T12:59:30Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: open-webui
+            componentID: a217018cfe2ee26e
+            componentName: aiohttp
+            componentVersion: 3.13.2
+            componentType: python
+            componentLocation: /usr/share/open-webui/lib/python3.11/site-packages/aiohttp-3.13.2.dist-info/METADATA
+            scanner: grype
+
   - id: CGA-vp8f-xf9w-8jwj
     aliases:
       - CVE-2024-35195