CVE-2025-7105

The CVE-2025-7105 entry concerns danny-avila/librechat where an unrestricted Fork Function at /api/convos/fork allows rapid forking of content. If a forked item contains a Mermaid graph with many nodes, a JavaScript heap out of memory error can occur on service restart, causing a Denial of Servic...

Multiple SQL Injection Vulnerabilities in Fork CMS

Fork CMS is an open source content management system CMS developed using PHP. The system contains blogs , questions and answers , forms and other modules . A SQL injection vulnerability exists in Translations in Fork CMS versions prior to 3.8.6. The 'language' and 'type' parameters are not...