GHSA-G6GW-C38X-MQFC vulnerabilities

Vulnerabilities for packages: kibana, librechat...

CVE-2026-84364 vulnerabilities

Vulnerabilities for packages: kibana, librechat...

GHSA-CRVJ-82CR-HJCX vulnerabilities

Vulnerabilities for packages: kibana, librechat...

GHSA-GQVV-2MRQ-WPJV vulnerabilities

Vulnerabilities for packages: kibana, librechat...

CVE-2026-84363 vulnerabilities

Vulnerabilities for packages: kibana, librechat...

CVE-2026-84365 vulnerabilities

Vulnerabilities for packages: kibana, librechat...

LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

GHSA-RGJ7-G3M4-5G8C vulnerabilities

Vulnerabilities for packages: tileserver-gl, librechat, tileserver-gl-fips, zitadel, langfuse, peerdb-ui, keep, langfuse-fips, homepage...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, lerna, gitlab-rails-ce, nextcloud-server, azurite, redisinsight, opensearch-dashboards, prism, awx, semaphore, librechat, langfuse, jitsucom-jitsu, opensearch-dashboards-fips, gitlab-rails-ce-fips, wazuh-dashboard, kibana,...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, lerna, gitlab-rails-ce, nextcloud-server, azurite, redisinsight, opensearch-dashboards, prism, awx, semaphore, librechat, langfuse, jitsucom-jitsu, opensearch-dashboards-fips, gitlab-rails-ce-fips, wazuh-dashboard, kibana,...

GHSA-PX8P-9VWX-VF98 vulnerabilities

Vulnerabilities for packages: tileserver-gl, librechat, lambda-nodejs, langfuse, langfuse-fips...

CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: tileserver-gl, librechat, lambda-nodejs, langfuse, langfuse-fips...

GHSA-GCR2-9V8M-GQ45 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-68921 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-82659 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, librechat, kibana, unleash, unleash-fips, langfuse, langfuse-fips...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, cert-manager-fips, pgwatch, victoriametrics-cluster-fips, aws-ebs-csi-driver-fips, flux-image-automation-controller, terragrunt, dkron, gotenberg, stakater-reloader, nova-fips, grafana-operator, grafana-rollout-operator, metacontroller,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, gitlab-runner-fips, longhorn-backing-image-manager, teleport-operator-fips, buildkite-agent, plugin-barman-cloud, kiam, external-secrets-operator, kubernetes-fips, loki, grafana-mimir-fips, docker-cli-fips, grafana-fips,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, kubeflow-katib, gitlab-runner-fips, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, plugin-barman-cloud, wave, kiam, external-secrets-operator,...

GHSA-55Q2-FJHQ-7XH7 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips, gitlab-rails-ce-fips, awx, kibana, wazuh-dashboard, langfuse, gitlab-rails-ce, nextcloud-server, langfuse-fips...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards, jitsucom-jitsu, redisinsight, librechat, lerna, opensearch-dashboards-fips, awx, kibana, prism, semaphore, wazuh-dashboard, kubeflow-centraldashboard, langfuse, nextcloud-server, langfuse-fips...