CVE-2026-84364 vulnerabilities

Vulnerabilities for packages: kibana, librechat...

GHSA-G6GW-C38X-MQFC vulnerabilities

Vulnerabilities for packages: kibana, librechat...

GHSA-GQVV-2MRQ-WPJV vulnerabilities

Vulnerabilities for packages: kibana, librechat...

GHSA-CRVJ-82CR-HJCX vulnerabilities

Vulnerabilities for packages: kibana, librechat...

CVE-2026-84363 vulnerabilities

Vulnerabilities for packages: kibana, librechat...

CVE-2026-84365 vulnerabilities

Vulnerabilities for packages: kibana, librechat...

LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

GHSA-RGJ7-G3M4-5G8C vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, peerdb-ui, homepage, zitadel, keep, tileserver-gl, langfuse, librechat, langfuse-fips...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: semaphore, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard, librechat, prism, redisinsight, langfuse-fips, nextcloud-server, kibana, kubeflow-centraldashboard, wazuh-dashboard-fips, azurite, lerna, langfuse, jitsucom-jitsu, gitlab-rails-ce-fips, aw...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: semaphore, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard, librechat, prism, redisinsight, langfuse-fips, nextcloud-server, kibana, kubeflow-centraldashboard, wazuh-dashboard-fips, azurite, lerna, langfuse, jitsucom-jitsu, gitlab-rails-ce-fips, aw...

GHSA-PX8P-9VWX-VF98 vulnerabilities

Vulnerabilities for packages: lambda-nodejs, tileserver-gl, langfuse, librechat, langfuse-fips...

CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: lambda-nodejs, tileserver-gl, langfuse, librechat, langfuse-fips...

GHSA-GCR2-9V8M-GQ45 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-68921 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-82659 vulnerabilities

Vulnerabilities for packages: kibana, jitsucom-jitsu, unleash-fips, unleash, langfuse, librechat, langfuse-fips...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni-fips, flux-operator-fips, aws-ebs-csi-driver-fips, flux-image-reflector-controller, flux-fips, victoriametrics-cluster, metacontroller, flux-helm-controller, victoriametrics-cluster-fips, flux-source-controller, terragrunt, victorialogs, pgwatch, dkron...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, knative-operator, cluster-api-azure-controller-fips, opentelemetry-collector-contrib, jobset-fips, temporal-server-fips, terraform-provider-grafana-fips, terragrunt, secrets-store-csi-driver-fips, dcgm-exporter-fips, influxd,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, chart-testing-fips, cluster-api-azure-controller-fips, knative-operator, liquibase-package-manager, opentelemetry-collector-contrib, ytt-fips, jobset-fips, temporal-server-fips, terraform-provider-grafana-fips, terragrunt,...

GHSA-55Q2-FJHQ-7XH7 vulnerabilities

Vulnerabilities for packages: nextcloud-server, opensearch-dashboards-fips, kibana, opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, gitlab-rails-ce-fips, awx, gitlab-rails-ce, langfuse, librechat, langfuse-fips...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: semaphore, nextcloud-server, opensearch-dashboards-fips, kibana, kubeflow-centraldashboard, opensearch-dashboards, prism, wazuh-dashboard, jitsucom-jitsu, wazuh-dashboard-fips, lerna, awx, langfuse, redisinsight, librechat, langfuse-fips...