EUVD-2025-7066

Malicious code in bioql PyPI...

EUVD-2023-49456

Malicious code in bioql PyPI...

EUVD-2023-26856

Malicious code in bioql PyPI...

EUVD-2025-27623

Malicious code in bioql PyPI...

EUVD-2025-22333

Malicious code in bioql PyPI...

CVE-2025-59422

Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/chat-messages?conversationid=&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query...

CVE-2025-6088

In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Although UUIDv4 conversation IDs are generated server-side and are difficult to brute force, they...

CVE-2025-6088

In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Although UUIDv4 conversation IDs are generated server-side and are difficult to brute force, they...

CVE-2025-6088

CVE-2025-6088 affects danny-avila/librechat. In version 0.7.8, improper authorization on the conversation sharing endpoint /api/share/conversationID allows a logged-in user to read other users’ conversations when the conversation ID is known. UUIDv4 IDs are server-side but can leak via logs, hist...

CVE-2025-6088 Improper Authorization in danny-avila/librechat

In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Although UUIDv4 conversation IDs are generated server-side and are difficult to brute force, they...

LibreChat 授权问题漏洞

LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. An authorization issue vulnerability exists in LibreChat version 0.7.8, which stems from improper authorization controls for the conversation sharing feature and could lead to unauthorized access to other users' conversatio...

PT-2025-37108

Name of the Vulnerable Software and Affected Versions: danny-avila/librechat version 0.7.8 Description: Improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Conversation IDs, while generated...

Cross-Site Scripting (Reflected XSS)

concrete5/concrete5 is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to unsanitized input in the Conversation Messages Dashboard Page, which allows an attacker to steal session cookies or tokens, deface web content, redirect victims to malicious sites, or execute unauthorized...

Malicious code in conversation-memory (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41377 Malicious code in conversation-memory (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-7134 Malicious code in @conversation-app/core-api (npm)

The package @conversation-app/core-api was found to contain malicious code...

MAL-2025-34669 Malicious code in tell-research-conversation (npm)

The package tell-research-conversation was found to contain malicious code...

Malicious code in @conversation-app/core-api (npm)

The package @conversation-app/core-api was found to contain malicious code...

Malicious code in tell-research-conversation (npm)

The package tell-research-conversation was found to contain malicious code...

Emotion Recognition in Coversation 代码问题漏洞

Emotion Recognition in Coversation is an application by the individual developer Taewoon Kim. A code issue vulnerability exists in Emotion Recognition in Coversation version 0.3 and earlier, which stems from the use of jsonpickle leading to unsafe deserialization...