LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

GHSA-PRGH-XP8R-P3M5 vulnerabilities

Vulnerabilities for packages: unleash-fips, langfuse, librechat...

CVE-2026-101902 vulnerabilities

Vulnerabilities for packages: azurite, prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, kubeflow-centraldashboard, kibana, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-101898 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-101909 vulnerabilities

Vulnerabilities for packages: azurite, prism, wazuh-dashboard, librechat, opensearch-dashboards-fips, kubeflow-centraldashboard, kibana, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

GHSA-542G-H47M-68V8 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-101899 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-101906 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-101907 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

GHSA-9FR6-4GFG-395G vulnerabilities

Vulnerabilities for packages: azurite, prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, kubeflow-centraldashboard, kibana, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-101905 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

GHSA-C29M-XWM3-CM6R vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

GHSA-J8RH-479H-CP32 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

GHSA-M8M8-QJ5V-23W3 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-101904 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-101900 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

GHSA-3PQ3-5FJ3-CG6V vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

GHSA-4HQW-QXG8-JXX2 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

GHSA-VH66-26GQ-Q6X8 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-101901 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce, kibana, kubeflow-centraldashboard, semaphore, lambda-nodejs, lerna, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, langfuse, opensearch-dashboards...