LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

GHSA-G6GW-C38X-MQFC vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, librechat, wazuh-dashboard...

CVE-2026-84364 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, librechat, wazuh-dashboard...

GHSA-CRVJ-82CR-HJCX vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, librechat, wazuh-dashboard...

GHSA-GQVV-2MRQ-WPJV vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, librechat, wazuh-dashboard...

CVE-2026-84365 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, librechat, wazuh-dashboard...

CVE-2026-84363 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, librechat, wazuh-dashboard...

GHSA-RGJ7-G3M4-5G8C vulnerabilities

Vulnerabilities for packages: homepage, keep, tileserver-gl, langfuse-fips, tileserver-gl-fips, langfuse, librechat, keep-fips, zitadel, peerdb-ui...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kubeflow-centraldashboard, wazuh-dashboard-fips, azurite, wazuh-dashboard, awx, langfuse, nextcloud-server, gitlab-rails-ce, opensearch-dashboards-fips, langfuse-fips, semaphore, prism, jitsucom-jitsu, opensearch-dashboards, kibana, librechat,...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kubeflow-centraldashboard, wazuh-dashboard-fips, azurite, wazuh-dashboard, awx, langfuse, nextcloud-server, gitlab-rails-ce, opensearch-dashboards-fips, langfuse-fips, semaphore, prism, jitsucom-jitsu, opensearch-dashboards, kibana, librechat,...

GHSA-PX8P-9VWX-VF98 vulnerabilities

Vulnerabilities for packages: lambda-nodejs, tileserver-gl, langfuse-fips, tileserver-gl-fips, librechat, langfuse...

CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: lambda-nodejs, tileserver-gl, langfuse-fips, tileserver-gl-fips, librechat, langfuse...

GHSA-GCR2-9V8M-GQ45 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-68921 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-82659 vulnerabilities

Vulnerabilities for packages: unleash, kibana, unleash-fips, langfuse-fips, librechat, langfuse, jitsucom-jitsu...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: gotenberg, flux-notification-controller, cluster-autoscaler-fips, grafana-operator-fips, podinfo, grafana-fips, aws-ebs-csi-driver-fips, victorialogs, pluto, go, victoriametrics, stakater-reloader, localstack, flux-source-controller, metacontroller, terragrunt,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: beats-fips, restic-fips, kyverno-policy-reporter-ui, kubernetes-event-exporter-fips, prometheus-postgres-exporter, crossplane-provider-aws-dynamodb-fips, grpcurl-fips, ingress-nginx-controller-fips, argo-rollouts-fips, cerbos-fips, external-secrets-operator-fips,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: beats-fips, neuvector-dbgen-fips, prometheus-beat-exporter, restic-fips, kyverno-policy-reporter-ui, kubernetes-event-exporter-fips, prometheus-postgres-exporter, crossplane-provider-aws-dynamodb-fips, grpcurl-fips, ingress-nginx-controller-fips, argo-rollouts-fips,...

GHSA-55Q2-FJHQ-7XH7 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, wazuh-dashboard-fips, kibana, opensearch-dashboards-fips, langfuse-fips, wazuh-dashboard, awx, langfuse, librechat, nextcloud-server, opensearch-dashboards...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: lerna, kubeflow-centraldashboard, wazuh-dashboard-fips, kibana, opensearch-dashboards-fips, langfuse-fips, wazuh-dashboard, semaphore, awx, langfuse, librechat, jitsucom-jitsu, nextcloud-server, opensearch-dashboards, prism, redisinsight...