PT-2026-105871

Summary Any member of a channel who can post to it could also replace the text of a message written by a different member. The channel branch of the chat completions endpoint checked that the caller may write to the channel, and that the targeted message belongs to that channel, but never checked...

PT-2026-105867

Summary The chat-completions endpoint reads a folder id out of the request body and saves the newly created chat into that folder without checking that the caller is allowed to write there. Any authenticated user who knows a folder's id can put a chat of their own into another user's folder,...

PT-2026-103793

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advan...

PT-2026-103984

Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages...

PT-2026-105077

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, provider-controlled video titles in lazy video embeds could be reparsed as HTML when Discourse generated notification emails or chat summaries. A user with standard posting privileges could creat...

PT-2026-105078

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, attacker-controlled upload filenames used in chat message excerpts were rendered as unescaped HTML. A user able to upload a file and send chat content could place markup in a filename that was th...

agntspace (1.156.1), friday-chat (>=0.1.0a1, <=0.1.0a2) +8 more potentially affected by CVE-2026-84377 via litellm (>=1.94.0, <=1.94.1)

litellm PYPI version =1.94.0, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a2 - litellm-routing-testbed 0.1.0 Source cves: CVE-2026-84377 Source advisory: GHSA-3CV6-JPF6-8222...

agntspace (1.156.1), friday-chat (>=0.1.0a1, <=0.1.0a2) +8 more potentially affected by CVE-2026-84377 via litellm (>=1.94.0, <=1.94.1)

litellm PYPI version =1.94.0, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a1, =0.1.0a2 - litellm-routing-testbed 0.1.0 Source cves: CVE-2026-84377 Source advisory: OSV:GHSA-3CV6-JPF6-8222...

PT-2026-103615

Name of the Vulnerable Software and Affected Versions DB-GPT versions 0.7.5 through 0.8.0 Description A code injection issue exists where a skill uploaded via the '/api/v1/skills/upload' endpoint can subsequently be executed through the '/api/v1/chat/react-agent' flow. Recommendations At the...

CVE-2026-51866: Improper Control of Generation of Code

In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat/react-agent flow...

aiohttp-ext-auth (>=0.1.1, <=0.1.2), ais-dom (>=0.76.5, <=0.91.5) +34 more potentially affected by CVE-2026-102269 via pyjwt (1.6.4)

pyjwt PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aiohttp-ext-auth =0.1.1, =0.76.5, =0.0.1, =0.0.1, =0.4.0, =1.0.0, =0.0.19, =0.5.0, =1.1.7, =0.31.0, =0.0.1, =0.0.2, =0.1.0 and more Source cves:...

aiohttp-ext-auth (>=0.1.1, <=0.1.2), ais-dom (>=0.76.5, <=0.91.5) +34 more potentially affected by CVE-2026-102268 via pyjwt (1.6.4)

pyjwt PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aiohttp-ext-auth =0.1.1, =0.76.5, =0.0.1, =0.0.1, =0.4.0, =1.0.0, =0.0.19, =0.5.0, =1.1.7, =0.31.0, =0.0.1, =0.0.2, =0.1.0 and more Source cves:...

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

PT-2026-102822

Name of the Vulnerable Software and Affected Versions Greek Universities Network GUnet Open eClass Platform version 3.15 Description A remote attacker can execute arbitrary code through the chat input field within the course module. This issue is a code injection, which occurs when an application...

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

EUVD-2024-55775

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

CVE-2024-31026

The Greek Universities Network (GUnet) Open eClass Platform v.3.15 is vulnerable to a code injection flaw. A remote attacker can exploit the chat input field within the course module to execute arbitrary code on the system. To remediate this issue, users should update the platform to a version th...

CVE-2024-31026: Improper Control of Generation of Code

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

Uncontrolled Resource Consumption

Apache Tomcat is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to improper resource management in the WebSocket chat example application, which allows an attacker to consume excessive server resources and potentially cause a denial-of-service condition...