14 matches found
Meilisearch - Detect
An open-source, blazingly fast, and hyper-relevant search engine that will improve your search experience. !/usr/bin/env python3 -- coding: utf-8 -- """An open-source, blazingly fast, and hyper-relevant search engine that will improve your search experience.""" from kittysploit import from...
ariadne (>=0.15.0.dev4, <=0.15.0.dev5), ariadne-graphql-modules (>=0.2.0.dev1, <=0.2.0.dev2) +8 more potentially affected by CVE-2026-54282 via starlette (0.18.0)
starlette PYPI version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - ariadne =0.15.0.dev4, =0.2.0.dev1, =0.1.1, =1.0.0rc4, =1.4.1, =1.4.2 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...
FreeScout Support Service Management System Meilisearch Disclosure DoS
The vulnerability of the /app-settings/meilisearch component of the Faster Search module in the FreeScout support service management system is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to disclose sensitive...
EUVD-2025-23599
Malicious code in bioql PyPI...
CVE-2025-54868
LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...
CVE-2025-54868
LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...
CVE-2025-54868 LibreChat exposes arbitrary chats through Meilisearch engine
LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...
CVE-2025-54868 LibreChat exposes arbitrary chats through Meilisearch engine
LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...
CVE-2025-54868
LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...
CVE-2025-54868 LibreChat exposes arbitrary chats through Meilisearch engine
LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...
CVE-2025-54868
LibreChat (a ChatGPT clone) contains a vulnerability in versions 0.0.6 through 0.7.7-rc1 where the exposed /api/search/test testing endpoint allows reading arbitrary chats stored in the Meilisearch engine due to insufficient access control. The issue enables viewing chats from arbitrary users. Th...
CVE-2025-54868: Improper Authorization
LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...
PT-2025-31902
Name of the Vulnerable Software and Affected Versions LibreChat versions 0.0.6 through 0.7.7-rc1 Description LibreChat, a ChatGPT clone, contains an exposed testing endpoint that allows unauthorized access to chats stored in the Meilisearch engine. The /api/search/test endpoint does not enforce...
PT-2025-42853
Уязвимость компонента /app-settings/meilisearch модуля Faster Search системы управления службой поддержки FreeScout связана с недостаточной проверкой запросов на стороне сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию и вызвать...