LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

GHSA-HQ66-CQWQ-W95J vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-16633 vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-JJMJ-JMHJ-QWJ2 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-53668 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-59876 vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-JFJ6-75FJ-8934 vulnerabilities

Vulnerabilities for packages: librechat...

GHSA-F88M-G3JW-G9CJ vulnerabilities

Vulnerabilities for packages: homepage, keep-fips, librechat, langfuse, tileserver-gl, langfuse-fips, keep, tileserver-gl-fips, peerdb-ui, jitsucom-jitsu...

CVE-2026-65899 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, wazuh-dashboard, librechat, langfuse, nextcloud-server, langfuse-fips, opensearch-dashboards...

CVE-2026-65903 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, opensearch-dashboards-fips, wazuh-dashboard, librechat, langfuse, nextcloud-server, langfuse-fips, opensearch-dashboards...

CVE-2026-65898 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, opensearch-dashboards-fips, wazuh-dashboard, librechat, langfuse, nextcloud-server, langfuse-fips, opensearch-dashboards...

CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, wazuh-dashboard, librechat, langfuse, nextcloud-server, langfuse-fips...

CVE-2026-65900 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, wazuh-dashboard, librechat, langfuse, nextcloud-server, langfuse-fips...

CVE-2026-65902 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, wazuh-dashboard, librechat, langfuse, nextcloud-server, langfuse-fips...

GHSA-94RC-8X27-4472 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-54270 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-56761 vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard, librechat, langfuse, langfuse-fips...

CVE-2026-54037

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2025-7105 added forkIpLimiter and forkUserLimiter rate limiters to POST /api/convos/fork to prevent rapid-fire conversation duplication. However, the POST /api/convos/duplicate endpoint...

CVE-2026-54024

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2024-11171 commit bb58a2d0 added limits: fileSize to createMulterInstance in the file upload routes. However, the POST /api/convos/import endpoint uses a separate multer instance that w...

CVE-2026-54025

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, there is a vulnerability in LibreChat's markdown artifact preview pipeline. The marked library v15.0.12 does not HTML-escape double-quote characters in image alt text when a custom renderer falls throu...