492 matches found
LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header
danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: grafana-fips, nova-fips, polaris, localstack, aws-ebs-csi-driver-fips, flux-operator, grafana-operator-fips, omnictl-multiarch, stakater-reloader, victorialogs-fips, aws-ebs-csi-driver, amazon-k8s-cni-fips, pluto, flux-source-watcher, victoriametrics-cluster-fips,...
GO-2026-4603 vulnerabilities
Vulnerabilities for packages: kong-ingress-controller, kots, ko-fips, localstack, crossplane-provider-aws-efs, prometheus-node-exporter-fips, cloud-sql-proxy, kyverno, emqx-exporter-fips, seaweedfs-operator, beats-fips, chronyexporter, json-exporter-fips, crossplane-provider-aws-kinesis,...
GO-2026-4601 vulnerabilities
Vulnerabilities for packages: kong-ingress-controller, aws-nuke, kots, ko-fips, localstack, crossplane-provider-aws-efs, prometheus-node-exporter-fips, crane-fips, cloud-sql-proxy, victoriametrics-operator, kyverno, emqx-exporter-fips, seaweedfs-operator, beats-fips, maru, chronyexporter,...
GHSA-55Q2-FJHQ-7XH7 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, librechat, langfuse-fips, langfuse, kibana...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: awx, prism, opensearch-dashboards, opensearch-dashboards-fips, langfuse-fips, lerna, jitsucom-jitsu, nextcloud-server, redisinsight, semaphore, wazuh-dashboard-fips, wazuh-dashboard, librechat, kubeflow-centraldashboard, langfuse, kibana...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: awx, prism, opensearch-dashboards, opensearch-dashboards-fips, langfuse-fips, lerna, jitsucom-jitsu, nextcloud-server, redisinsight, semaphore, wazuh-dashboard-fips, wazuh-dashboard, librechat, kubeflow-centraldashboard, langfuse, kibana...
GHSA-HQ66-CQWQ-W95J vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-16633 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-JJMJ-JMHJ-QWJ2 vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-53668 vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-59876 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-JFJ6-75FJ-8934 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-F88M-G3JW-G9CJ vulnerabilities
Vulnerabilities for packages: homepage, tileserver-gl-fips, peerdb-ui, keep-fips, jitsucom-jitsu, tileserver-gl, librechat, keep, langfuse-fips, langfuse...
CVE-2026-65899 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, librechat, langfuse-fips, langfuse, kibana...
CVE-2026-65900 vulnerabilities
Vulnerabilities for packages: nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, librechat, langfuse-fips, langfuse, kibana...
CVE-2026-65903 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, librechat, langfuse-fips, langfuse, kibana...
CVE-2026-65898 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, librechat, langfuse-fips, langfuse, kibana...