CVE-2026-67314 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards, jitsucom-jitsu, redisinsight, librechat, lerna, gitlab-rails-ce-fips, awx, kibana, opensearch-dashboards-fips, prism, semaphore, wazuh-dashboard, kubeflow-centraldashboard, gitlab-rails-ce, langfuse, nextcloud-server,...

CVE-2026-16633 vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-HQ66-CQWQ-W95J vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-JJMJ-JMHJ-QWJ2 vulnerabilities

Vulnerabilities for packages: librechat, keycloak...

CVE-2026-53668 vulnerabilities

Vulnerabilities for packages: librechat, keycloak...

GHSA-JFJ6-75FJ-8934 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-59876 vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-F88M-G3JW-G9CJ vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl, librechat, tileserver-gl-fips, langfuse, peerdb-ui, keep, langfuse-fips, keep-fips, homepage...

CVE-2026-65899 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards, librechat, wazuh-dashboard, gitlab-rails-ce-fips, kibana, langfuse, gitlab-rails-ce, nextcloud-server, langfuse-fips...

CVE-2026-65898 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips, gitlab-rails-ce-fips, wazuh-dashboard, kibana, langfuse, gitlab-rails-ce, nextcloud-server, langfuse-fips...

CVE-2026-65900 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, librechat, wazuh-dashboard, gitlab-rails-ce-fips, kibana, langfuse, gitlab-rails-ce, nextcloud-server, langfuse-fips...

CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, librechat, wazuh-dashboard, gitlab-rails-ce-fips, kibana, langfuse, gitlab-rails-ce, nextcloud-server, langfuse-fips...

CVE-2026-65903 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips, wazuh-dashboard, kibana, langfuse, nextcloud-server, langfuse-fips...

CVE-2026-65902 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, librechat, wazuh-dashboard, gitlab-rails-ce-fips, kibana, langfuse, gitlab-rails-ce, nextcloud-server, langfuse-fips...

GHSA-94RC-8X27-4472 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-54270 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-56761 vulnerabilities

Vulnerabilities for packages: librechat, wazuh-dashboard, kibana, langfuse, langfuse-fips...

CVE-2026-54037

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2025-7105 added forkIpLimiter and forkUserLimiter rate limiters to POST /api/convos/fork to prevent rapid-fire conversation duplication. However, the POST /api/convos/duplicate endpoint...

CVE-2026-54024

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2024-11171 commit bb58a2d0 added limits: fileSize to createMulterInstance in the file upload routes. However, the POST /api/convos/import endpoint uses a separate multer instance that w...

CVE-2026-54025

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, there is a vulnerability in LibreChat's markdown artifact preview pipeline. The marked library v15.0.12 does not HTML-escape double-quote characters in image alt text when a custom renderer falls throu...