492 matches found
LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header
danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: victoriametrics-cluster-fips, victorialogs-fips, cluster-autoscaler-fips, aws-load-balancer-controller-fips, dkron, gotenberg, flux-operator-fips, stakater-reloader, localstack, flux-notification-controller, victorialogs, polaris, terragrunt, flux-source-watcher,...
GO-2026-4603 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, terraform-provider-acme-fips, docker-compose-fips, buildkite-agent, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8sgpt, temporal-server, vault-secrets-operator, kube-fluentd-operator, terraform-provider-azuread-fips, tkn,...
GO-2026-4601 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, gitleaks, docker-compose-fips, buildkite-agent, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8sgpt, rabbitmq-cluster-operator-fips, temporal-server, terraform-provider-acme-fips, kube-fluentd-operator, vault-secrets-operator,...
GHSA-55Q2-FJHQ-7XH7 vulnerabilities
Vulnerabilities for packages: langfuse, librechat, opensearch-dashboards, langfuse-fips, kibana, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards-fips...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, opensearch-dashboards, semaphore, awx, lerna, langfuse-fips, kibana, nextcloud-server, wazuh-dashboard, redisinsight, wazuh-dashboard-fips, librechat, jitsucom-jitsu, kubeflow-centraldashboard, prism...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, opensearch-dashboards, semaphore, awx, lerna, langfuse-fips, kibana, nextcloud-server, wazuh-dashboard, redisinsight, wazuh-dashboard-fips, librechat, jitsucom-jitsu, kubeflow-centraldashboard, prism...
GHSA-HQ66-CQWQ-W95J vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-16633 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-JJMJ-JMHJ-QWJ2 vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-53668 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-JFJ6-75FJ-8934 vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-59876 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-F88M-G3JW-G9CJ vulnerabilities
Vulnerabilities for packages: tileserver-gl, langfuse, keep-fips, peerdb-ui, homepage, langfuse-fips, jitsucom-jitsu, tileserver-gl-fips, librechat, keep...
CVE-2026-65899 vulnerabilities
Vulnerabilities for packages: langfuse, librechat, opensearch-dashboards, langfuse-fips, kibana, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server...
CVE-2026-65901 vulnerabilities
Vulnerabilities for packages: langfuse, librechat, langfuse-fips, kibana, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server...
CVE-2026-65900 vulnerabilities
Vulnerabilities for packages: langfuse, librechat, langfuse-fips, kibana, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server...
CVE-2026-65898 vulnerabilities
Vulnerabilities for packages: langfuse, librechat, opensearch-dashboards, langfuse-fips, kibana, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards-fips...