LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

GHSA-C6GR-QVV4-5V3F vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, langfuse-fips, nextcloud-server, opensearch-dashboards, wazuh-dashboard-fips, awx, gitlab-rails-ce, librechat, supabase, gitlab-rails-ce-fips, langfuse...

GHSA-CG2G-XH64-V4Q7 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, langfuse-fips, nextcloud-server, opensearch-dashboards, wazuh-dashboard-fips, awx, gitlab-rails-ce, librechat, supabase, gitlab-rails-ce-fips, langfuse...

GHSA-MRV2-3PQR-J5JR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, langfuse-fips, nextcloud-server, opensearch-dashboards, wazuh-dashboard-fips, awx, gitlab-rails-ce, librechat, supabase, gitlab-rails-ce-fips, langfuse...

GHSA-C9RX-X947-FP3H vulnerabilities

Vulnerabilities for packages: librechat, saf...

CVE-2026-113650 vulnerabilities

Vulnerabilities for packages: librechat, saf...

GHSA-QQMP-WF37-98F9 vulnerabilities

Vulnerabilities for packages: azurite, librechat, zitadel, kibana...

CVE-2026-104872 vulnerabilities

Vulnerabilities for packages: azurite, librechat, zitadel, kibana...

CVE-2026-90776 vulnerabilities

Vulnerabilities for packages: librechat, langfuse-fips, langfuse, unleash-fips...

GHSA-VM5R-23W9-M8HX vulnerabilities

Vulnerabilities for packages: librechat, langfuse-fips, langfuse, unleash-fips...

GHSA-3WCJ-GJVF-FVCH vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse-fips, opensearch-dashboards, kibana, librechat, langfuse...

CVE-2026-56763 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse-fips, opensearch-dashboards, kibana, librechat, langfuse...

GHSA-JXRP-R7GX-Q4J8 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, langfuse-fips, nextcloud-server, opensearch-dashboards, wazuh-dashboard-fips, awx, gitlab-rails-ce, kibana, librechat, tensorflow-gpu-jupyter, jupyter-base-notebook, gitlab-rails-ce-fips, langfuse...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, langfuse-fips, nextcloud-server, opensearch-dashboards, wazuh-dashboard-fips, awx, gitlab-rails-ce, kibana, librechat, tensorflow-gpu-jupyter, jupyter-base-notebook, gitlab-rails-ce-fips, langfuse...

GHSA-6623-4Q32-82V8 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, commercial-gitlab-rails-ee-fips, wazuh-dashboard-fips, commercial-gitlab-rails-ee, librechat, supabase, supabase-fips...

GHSA-PRGH-XP8R-P3M5 vulnerabilities

Vulnerabilities for packages: librechat, langfuse-fips, langfuse, unleash-fips...

CVE-2026-93981 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, commercial-gitlab-rails-ee-fips, wazuh-dashboard-fips, commercial-gitlab-rails-ee, librechat, supabase, supabase-fips...

GHSA-HXH3-VQPV-XPQV vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, commercial-gitlab-rails-ee-fips, wazuh-dashboard-fips, commercial-gitlab-rails-ee, librechat, supabase, supabase-fips...

CVE-2026-101898 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, redisinsight, librechat, gitlab-rails-ce-fips, langfuse, wazuh-dashboard, nextcloud-server, wazuh-dashboard-fips, gitlab-rails-ce, kubeflow-centraldashboard, opensearch-dashboards, awx, prism, semaphore,...

CVE-2026-101902 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kibana, redisinsight, azurite, librechat, gitlab-rails-ce-fips, langfuse, wazuh-dashboard, nextcloud-server, wazuh-dashboard-fips, gitlab-rails-ce, kubeflow-centraldashboard, opensearch-dashboards, awx, prism, semaphore,...