Lucene search
K

7 matches found

OSV
OSV
added 2026/01/08 6:22 p.m.2 views

CVE-2026-22257 Salvo is vulnerable to stored XSS in the list_html function by uploading files with malicious names

Salvo is a Rust web backend framework. Prior to version 0.88.1, the function listhtml generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can uploa...

8.8CVSS6.2AI score0.0003EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/11/01 12:25 a.m.3 views

CVE-2025-8849

LibreChat version 0.7.9 is vulnerable to a Denial of Service DoS attack due to unbounded parameter values in the /api/memories endpoint. The key and value parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessive...

7.5CVSS6.8AI score0.00094EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/31 12:30 a.m.4 views

EUVD-2025-37228

LibreChat version 0.7.9 is vulnerable to a Denial of Service DoS attack due to unbounded parameter values in the /api/memories endpoint. The key and value parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessive...

5.4CVSS6.3AI score0.00094EPSS
Exploits1References3
OSV
OSV
added 2025/10/31 12:15 a.m.3 views

CVE-2025-8849

LibreChat version 0.7.9 is vulnerable to a Denial of Service DoS attack due to unbounded parameter values in the /api/memories endpoint. The key and value parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessive...

7.5CVSS6.9AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/30 11:42 p.m.4 views

CVE-2025-8849 Denial of Service in danny-avila/librechat

LibreChat version 0.7.9 is vulnerable to a Denial of Service DoS attack due to unbounded parameter values in the /api/memories endpoint. The key and value parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessive...

5.4CVSS6.5AI score0.00094EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/10/30 11:42 p.m.5 views

CVE-2025-8849 Denial of Service in danny-avila/librechat

LibreChat version 0.7.9 is vulnerable to a Denial of Service DoS attack due to unbounded parameter values in the /api/memories endpoint. The key and value parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessive...

5.4CVSS0.00094EPSS
Exploits1References2
Akamai Blog
Akamai Blog
added 2025/07/09 10:20 a.m.3 views

Building Serverless Apps with Spin and HTMX

A tutorial on building serverless applications using Fermyon Spin and htmx, demonstrating a shopping list app with a Rust back end and htmx-enhanced front end...

5.8AI score
Exploits0
Rows per page
Query Builder