LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

GHSA-QQMP-WF37-98F9 vulnerabilities

Vulnerabilities for packages: zitadel, azurite, librechat...

CVE-2026-104872 vulnerabilities

Vulnerabilities for packages: zitadel, azurite, librechat...

CVE-2026-90776 vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips, langfuse-fips, librechat...

GHSA-VM5R-23W9-M8HX vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips, langfuse-fips, librechat...

GHSA-3WCJ-GJVF-FVCH vulnerabilities

Vulnerabilities for packages: langfuse, kibana, opensearch-dashboards-fips, opensearch-dashboards, langfuse-fips, librechat...

CVE-2026-56763 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, opensearch-dashboards-fips, opensearch-dashboards, langfuse-fips, librechat...

GHSA-JXRP-R7GX-Q4J8 vulnerabilities

Vulnerabilities for packages: langfuse, tensorflow-gpu-jupyter, wazuh-dashboard, kibana, opensearch-dashboards-fips, wazuh-dashboard-fips, awx, opensearch-dashboards, langfuse-fips, librechat, gitlab-rails-ce-fips, jupyter-base-notebook, nextcloud-server, gitlab-rails-ce...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: langfuse, tensorflow-gpu-jupyter, wazuh-dashboard, kibana, opensearch-dashboards-fips, wazuh-dashboard-fips, awx, opensearch-dashboards, langfuse-fips, librechat, gitlab-rails-ce-fips, jupyter-base-notebook, nextcloud-server, gitlab-rails-ce...

GHSA-PRGH-XP8R-P3M5 vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips, langfuse-fips, librechat...

GHSA-6623-4Q32-82V8 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard, librechat...

CVE-2026-93981 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard, librechat...

GHSA-HXH3-VQPV-XPQV vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard, librechat...

GHSA-R4GJ-5M52-G5WH vulnerabilities

Vulnerabilities for packages: langfuse, redisinsight, kibana, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, awx, opensearch-dashboards, prism, langfuse-fips, librechat, semaphore, gitlab-rails-ce-fips, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, wazuh-dashboard,...

GHSA-X97P-JQ2G-JP4F vulnerabilities

Vulnerabilities for packages: lerna, awx, semaphore, librechat, redisinsight, wazuh-dashboard, gitlab-rails-ce, lambda-nodejs, langfuse, wazuh-dashboard-fips, prism, opensearch-dashboards-fips, kubeflow-centraldashboard, opensearch-dashboards, langfuse-fips, gitlab-rails-ce-fips, kibana, azurite,...

GHSA-542G-H47M-68V8 vulnerabilities

Vulnerabilities for packages: langfuse, redisinsight, kibana, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, awx, opensearch-dashboards, prism, langfuse-fips, librechat, semaphore, gitlab-rails-ce-fips, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, wazuh-dashboard,...

CVE-2026-101907 vulnerabilities

Vulnerabilities for packages: langfuse, redisinsight, kibana, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, awx, opensearch-dashboards, prism, langfuse-fips, librechat, semaphore, gitlab-rails-ce-fips, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, wazuh-dashboard,...

GHSA-3PQ3-5FJ3-CG6V vulnerabilities

Vulnerabilities for packages: langfuse, redisinsight, kibana, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, awx, opensearch-dashboards, prism, langfuse-fips, librechat, semaphore, gitlab-rails-ce-fips, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, wazuh-dashboard,...

GHSA-9FR6-4GFG-395G vulnerabilities

Vulnerabilities for packages: lerna, awx, semaphore, librechat, redisinsight, wazuh-dashboard, gitlab-rails-ce, lambda-nodejs, langfuse, wazuh-dashboard-fips, prism, opensearch-dashboards-fips, kubeflow-centraldashboard, opensearch-dashboards, langfuse-fips, gitlab-rails-ce-fips, kibana, azurite,...

GHSA-C29M-XWM3-CM6R vulnerabilities

Vulnerabilities for packages: langfuse, redisinsight, kibana, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, awx, opensearch-dashboards, prism, langfuse-fips, librechat, semaphore, gitlab-rails-ce-fips, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, wazuh-dashboard,...