643 matches found
LibreChat deleteMessages Function File Deletion
The vulnerability of the deleteMessages function on the LibreChat artificial intelligence-based platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access and delete any files they desire...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: terragrunt, grafana-operator-fips, victorialogs, aws-load-balancer-controller-fips, flux-helm-controller, flux-operator, flux-image-reflector-controller, grafana-fips, aws-ebs-csi-driver-fips, cluster-autoscaler-fips, cert-manager-fips, nova, polaris, victoriametrics...
GO-2026-4603 vulnerabilities
Vulnerabilities for packages: backup-restore-operator-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, karma, minio-fips, gitaly, kube-arangodb-fips, newrelic-infrastructure-agent-fips, kapp-controller,...
GO-2026-4601 vulnerabilities
Vulnerabilities for packages: vertical-pod-autoscaler-fips, backup-restore-operator-fips, aws-otel-collector, coredns-fips, prometheus-node-exporter-fips, kubebuilder, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, karma, minio-fips, gitaly, nri-kafka,...
GHSA-55Q2-FJHQ-7XH7 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, gitlab-rails-ce-fips, wazuh-dashboard, opensearch-dashboards, nextcloud-server, kibana, langfuse, opensearch-dashboards-fips, tensorflow-gpu-jupyter, langfuse-fips, librechat, awx, gitlab-rails-ce, wazuh-dashboard-fips...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, lerna, prism, wazuh-dashboard, opensearch-dashboards, nextcloud-server, kibana, langfuse, jitsucom-jitsu, opensearch-dashboards-fips, langfuse-fips, kubeflow-centraldashboard, librechat, semaphore, awx, gitlab-rails-ce, redisinsight,...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: prism, lerna, wazuh-dashboard, opensearch-dashboards, nextcloud-server, langfuse, kibana, jitsucom-jitsu, opensearch-dashboards-fips, langfuse-fips, kubeflow-centraldashboard, librechat, semaphore, awx, redisinsight, wazuh-dashboard-fips...
GHSA-HQ66-CQWQ-W95J vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-16633 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-JJMJ-JMHJ-QWJ2 vulnerabilities
Vulnerabilities for packages: keycloak, librechat...
CVE-2026-53668 vulnerabilities
Vulnerabilities for packages: keycloak, librechat...
GHSA-JFJ6-75FJ-8934 vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-59876 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-F88M-G3JW-G9CJ vulnerabilities
Vulnerabilities for packages: tileserver-gl, langfuse, homepage, jitsucom-jitsu, langfuse-fips, librechat, tileserver-gl-fips, keep-fips, peerdb-ui, keep...
LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header Detection
danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. !/usr/bin/env python3 -- coding: utf-8 -- """danny-avila/librechat 0."""...
CVE-2026-65898 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, wazuh-dashboard, opensearch-dashboards, nextcloud-server, langfuse, kibana, opensearch-dashboards-fips, langfuse-fips, librechat, gitlab-rails-ce, wazuh-dashboard-fips...
CVE-2026-65899 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, wazuh-dashboard, opensearch-dashboards, nextcloud-server, langfuse, kibana, langfuse-fips, librechat, gitlab-rails-ce, wazuh-dashboard-fips...
CVE-2026-65902 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, wazuh-dashboard, nextcloud-server, langfuse, kibana, langfuse-fips, librechat, gitlab-rails-ce, wazuh-dashboard-fips...