LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

GHSA-MRV2-3PQR-J5JR vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, nextcloud-server, wazuh-dashboard, wazuh-dashboard-fips, gitlab-rails-ce, librechat, opensearch-dashboards, awx, supabase, opensearch-dashboards-fips, langfuse...

GHSA-C6GR-QVV4-5V3F vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, nextcloud-server, wazuh-dashboard, wazuh-dashboard-fips, gitlab-rails-ce, librechat, opensearch-dashboards, awx, supabase, opensearch-dashboards-fips, langfuse...

GHSA-CG2G-XH64-V4Q7 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, nextcloud-server, wazuh-dashboard, wazuh-dashboard-fips, gitlab-rails-ce, librechat, opensearch-dashboards, awx, supabase, opensearch-dashboards-fips, langfuse...

GHSA-C9RX-X947-FP3H vulnerabilities

Vulnerabilities for packages: librechat, saf...

CVE-2026-113650 vulnerabilities

Vulnerabilities for packages: librechat, saf...

GHSA-QQMP-WF37-98F9 vulnerabilities

Vulnerabilities for packages: azurite, kibana, librechat, zitadel...

CVE-2026-104872 vulnerabilities

Vulnerabilities for packages: azurite, kibana, librechat, zitadel...

GHSA-VM5R-23W9-M8HX vulnerabilities

Vulnerabilities for packages: librechat, langfuse, unleash-fips, langfuse-fips...

CVE-2026-90776 vulnerabilities

Vulnerabilities for packages: librechat, langfuse, unleash-fips, langfuse-fips...

GHSA-3WCJ-GJVF-FVCH vulnerabilities

Vulnerabilities for packages: langfuse-fips, kibana, librechat, opensearch-dashboards, opensearch-dashboards-fips, langfuse...

CVE-2026-56763 vulnerabilities

Vulnerabilities for packages: langfuse-fips, kibana, librechat, opensearch-dashboards, opensearch-dashboards-fips, langfuse...

GHSA-JXRP-R7GX-Q4J8 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, nextcloud-server, wazuh-dashboard, kibana, wazuh-dashboard-fips, gitlab-rails-ce, librechat, opensearch-dashboards, jupyter-base-notebook, awx, opensearch-dashboards-fips, langfuse, tensorflow-gpu-jupyter...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, nextcloud-server, wazuh-dashboard, kibana, wazuh-dashboard-fips, gitlab-rails-ce, librechat, opensearch-dashboards, jupyter-base-notebook, awx, opensearch-dashboards-fips, langfuse, tensorflow-gpu-jupyter...

GHSA-HXH3-VQPV-XPQV vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, librechat, commercial-gitlab-rails-ee...

CVE-2026-93981 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, librechat, commercial-gitlab-rails-ee...

GHSA-6623-4Q32-82V8 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, librechat, commercial-gitlab-rails-ee...

GHSA-PRGH-XP8R-P3M5 vulnerabilities

Vulnerabilities for packages: librechat, langfuse, unleash-fips, langfuse-fips...

CVE-2026-101899 vulnerabilities

Vulnerabilities for packages: nextcloud-server, gitlab-rails-ce, lerna, lambda-nodejs, opensearch-dashboards-fips, langfuse, wazuh-dashboard-fips, opensearch-dashboards, awx, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, prism, redisinsight, langfuse-fips, wazuh-dashboard, kibana,...

CVE-2026-101906 vulnerabilities

Vulnerabilities for packages: nextcloud-server, gitlab-rails-ce, lerna, lambda-nodejs, opensearch-dashboards-fips, langfuse, wazuh-dashboard-fips, opensearch-dashboards, awx, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, prism, redisinsight, langfuse-fips, wazuh-dashboard, kibana,...