LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-operator, nova, flux-source-controller, aws-ebs-csi-driver-fips, amazon-k8s-cni-fips, terragrunt, victorialogs, flux-helm-controller, victoriametrics-cluster-fips, grafana-operator-fips, polaris, grafana-rollout-operator, flux-image-reflector-controller,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: datadog-agent, kubernetes-dashboard-auth, openbao-fips, kafka-proxy-fips, crossplane-provider-aws-sns, neuvector-sigstore-interface-fips, istio-fips, kube-logging-logging-operator, gitlab-pages-fips, aws-fsx-csi-driver-fips, gitlab-operator, calico,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: flux-operator, datadog-agent, kubernetes-dashboard-auth, openbao-fips, kafka-proxy-fips, crossplane-provider-aws-sns, neuvector-sigstore-interface-fips, nri-mysql-fips, istio-fips, kapp-fips, nfs-subdir-external-provisioner, rancher-telemetry,...

GHSA-55Q2-FJHQ-7XH7 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, wazuh-dashboard, kibana, opensearch-dashboards, langfuse-fips, nextcloud-server, librechat, opensearch-dashboards-fips...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: awx, redisinsight, wazuh-dashboard-fips, langfuse, lerna, wazuh-dashboard, kubeflow-centraldashboard, kibana, jitsucom-jitsu, opensearch-dashboards, prism, langfuse-fips, nextcloud-server, semaphore, librechat, opensearch-dashboards-fips...

CVE-2026-67314 vulnerabilities

Vulnerabilities for packages: awx, redisinsight, wazuh-dashboard-fips, langfuse, lerna, wazuh-dashboard, kubeflow-centraldashboard, kibana, jitsucom-jitsu, opensearch-dashboards, prism, langfuse-fips, nextcloud-server, semaphore, librechat, opensearch-dashboards-fips...

CVE-2026-16633 vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-HQ66-CQWQ-W95J vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-JJMJ-JMHJ-QWJ2 vulnerabilities

Vulnerabilities for packages: keycloak, librechat...

CVE-2026-53668 vulnerabilities

Vulnerabilities for packages: keycloak, librechat...

CVE-2026-59876 vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-JFJ6-75FJ-8934 vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-F88M-G3JW-G9CJ vulnerabilities

Vulnerabilities for packages: keep-fips, tileserver-gl, langfuse, peerdb-ui, jitsucom-jitsu, langfuse-fips, tileserver-gl-fips, homepage, librechat, keep...

CVE-2026-65899 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, wazuh-dashboard, kibana, opensearch-dashboards, langfuse-fips, nextcloud-server, librechat...

CVE-2026-65903 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, wazuh-dashboard, kibana, opensearch-dashboards, langfuse-fips, nextcloud-server, librechat, opensearch-dashboards-fips...

CVE-2026-65900 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, wazuh-dashboard, kibana, langfuse-fips, nextcloud-server, librechat...

CVE-2026-65898 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, wazuh-dashboard, kibana, opensearch-dashboards, langfuse-fips, nextcloud-server, librechat, opensearch-dashboards-fips...

CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, wazuh-dashboard, kibana, langfuse-fips, nextcloud-server, librechat...

CVE-2026-65902 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, wazuh-dashboard, kibana, langfuse-fips, nextcloud-server, librechat...