638 matches found
CVE-2026-31949: Uncaught Exception
LibreChat is a ChatGPT clone with additional features. Prior to 0.8.3-rc1, a Denial of Service DoS vulnerability exists in the DELETE /api/convos endpoint that allows an authenticated attacker to crash the Node.js server process by sending malformed requests. The DELETE /api/convos route handler...
PT-2026-25366
LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP Model Context Protocol OAuth callback endpoint accepts the redirect from the identity provider and stores OAuth tokens for the user who initiated the flow, without verifying that the browser hitting the redire...
LibreChat 访问控制错误漏洞
LibreChat is an open-source, free, and highly customizable unified AI dialogue platform. It allows for the aggregation and running of large models from any vendor within a single interface. Version 0.8.2 to 0.8.2-rc3 of LibreChat contains a security vulnerability related to access control. This...
LibreChat 安全漏洞
LibreChat is an open-source, free, and highly customizable unified AI conversation platform. It allows for the aggregation and running of large models from any vendor within one interface. Versions of LibreChat prior to 0.8.3-rc1 contained a security vulnerability. This vulnerability stemmed from...
CVE-2026-29074 vulnerabilities
Vulnerabilities for packages: arangodb, librechat, vitess...
GHSA-XPQW-6GX7-V673 vulnerabilities
Vulnerabilities for packages: arangodb, librechat, vitess...
CVE-2026-3449 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gemini-cli, prism, argo-workflows, tileserver-gl-fips, librechat, gitlab-rails-ce-fips, langfuse, langfuse-fips, redisinsight, jitsucom-jitsu, kubeflow-pipelines, opensearch-dashboards, wazuh-dashboard, opensearch-dashboards-fips, code-server,...
GHSA-VPQ2-C234-7XJ6 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gemini-cli, prism, argo-workflows, tileserver-gl-fips, librechat, gitlab-rails-ce-fips, langfuse, langfuse-fips, redisinsight, jitsucom-jitsu, kubeflow-pipelines, opensearch-dashboards, wazuh-dashboard, opensearch-dashboards-fips, code-server,...
CVE-2026-29087 vulnerabilities
Vulnerabilities for packages: kibana, langfuse-fips, wazuh-dashboard-fips, opensearch-dashboards, wazuh-dashboard, librechat, opensearch-dashboards-fips, langfuse...
GHSA-WC8C-QW6V-H7F6 vulnerabilities
Vulnerabilities for packages: kibana, langfuse-fips, wazuh-dashboard-fips, opensearch-dashboards, wazuh-dashboard, librechat, opensearch-dashboards-fips, langfuse...
CVE-2026-0540 vulnerabilities
Vulnerabilities for packages: kibana, langfuse-fips, opensearch-dashboards, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce-fips, langfuse...
GHSA-V2WJ-7WPQ-C8VV vulnerabilities
Vulnerabilities for packages: kibana, langfuse-fips, opensearch-dashboards, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce-fips, langfuse...
CVE-2026-2359 vulnerabilities
Vulnerabilities for packages: redisinsight, librechat...
CVE-2026-3304 vulnerabilities
Vulnerabilities for packages: redisinsight, librechat...
GHSA-5528-5VMV-3XC2 vulnerabilities
Vulnerabilities for packages: redisinsight, librechat...
GHSA-V52C-386H-88MC vulnerabilities
Vulnerabilities for packages: redisinsight, librechat...
GHSA-XF7R-HGR6-V32P vulnerabilities
Vulnerabilities for packages: redisinsight, librechat...
CVE-2026-3520 vulnerabilities
Vulnerabilities for packages: redisinsight, librechat...