486 matches found
LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header
danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...
GHSA-55Q2-FJHQ-7XH7 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, kibana, librechat, nextcloud-server...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, kubeflow-centraldashboard, kibana, librechat, langfuse-fips, langfuse, nextcloud-server, redisinsight, prism, wazuh-dashboard-fips, lerna, semaphore, wazuh-dashboard, awx, jitsucom-jitsu...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, kubeflow-centraldashboard, kibana, librechat, langfuse-fips, langfuse, nextcloud-server, redisinsight, prism, wazuh-dashboard-fips, lerna, semaphore, wazuh-dashboard, awx, jitsucom-jitsu...
GHSA-HQ66-CQWQ-W95J vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-16633 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-JJMJ-JMHJ-QWJ2 vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-53668 vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-59876 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-JFJ6-75FJ-8934 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-F88M-G3JW-G9CJ vulnerabilities
Vulnerabilities for packages: keep-fips, peerdb-ui, homepage, librechat, langfuse-fips, langfuse, tileserver-gl, tileserver-gl-fips, keep, jitsucom-jitsu...
CVE-2026-65899 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, kibana, librechat, langfuse-fips, langfuse, wazuh-dashboard-fips, wazuh-dashboard, nextcloud-server...
CVE-2026-65900 vulnerabilities
Vulnerabilities for packages: kibana, librechat, langfuse-fips, langfuse, wazuh-dashboard-fips, wazuh-dashboard, nextcloud-server...
CVE-2026-65901 vulnerabilities
Vulnerabilities for packages: kibana, librechat, langfuse-fips, langfuse, wazuh-dashboard-fips, wazuh-dashboard, nextcloud-server...
CVE-2026-65898 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, kibana, librechat, langfuse-fips, langfuse, wazuh-dashboard-fips, wazuh-dashboard, nextcloud-server...
CVE-2026-65903 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, kibana, librechat, langfuse-fips, langfuse, wazuh-dashboard-fips, wazuh-dashboard, nextcloud-server...
CVE-2026-65902 vulnerabilities
Vulnerabilities for packages: kibana, librechat, langfuse-fips, langfuse, wazuh-dashboard-fips, wazuh-dashboard, nextcloud-server...
GHSA-94RC-8X27-4472 vulnerabilities
Vulnerabilities for packages: librechat...