641 matches found
PT-2024-10343
Name of the Vulnerable Software and Affected Versions LibreChat affected versions not specified Description The issue is related to an uncontrolled resource consumption in the checkBan.js script of the LibreChat platform, which is based on artificial intelligence. This could allow a remote attack...
unhandled exception caused server crash
Description in javascript express framework, if async router handler throw an exception, the whole server will crash. In librechat, some API, when leading with some malformed input, will have uncaught exception. This will lead to server crash, thus a full denial of service. Mind that although thi...
Allowing execution user provided regexp, lead to Redos
Description librechat have a functionality of uploading chatgpt chat log. when processing the log, following code is executed: const pattern = new RegExp \u3010$citation.metadata.extra.citedmessageidx\u2020.+?\u3011, 'g', ; const replacement = $citation.metadata.title; messageText =...
vulnerability-disclosures
REA Group Security Vulnerability Disclosures REA Groupht...
CVE-2024-41703
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
CVE-2024-41704
LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...
CVE-2024-41704
LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...
PT-2024-29526
Name of the Vulnerable Software and Affected Versions LibreChat versions through 0.7.4-rc1 Description The issue is related to the lack of validation of normalized pathnames of images. This could potentially lead to unspecified consequences. Recommendations For versions through 0.7.4-rc1, conside...
CVE-2024-41704: Improper Limitation of a Pathname to a Restricted Directory
LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...
PT-2024-29525
Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.7.4-rc1 Description The issue is related to incorrect access control for message updates. Recommendations For versions prior to 0.7.4-rc1, at the moment, there is no information about a newer version that contains...
CVE-2024-41703
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
CVE-2024-41704
LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...
CVE-2024-41704
LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...
CVE-2024-41704
Technical details about CVE-2024-41704 are not provided in the connected documents; monitor for updates.
CVE-2024-41704
LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...
CVE-2024-41703
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
CVE-2024-41703: Improper Access Control
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
CVE-2024-41703
LibreChat up to version 0.7.4-rc1 has an incorrect access control for message updates. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) with the same description. The CVSS-based impact is listed as critical in NVD (high confidentiality, integrity, and availability im...