6646 matches found
CVE-2025-6088 Improper Authorization in danny-avila/librechat
In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Although UUIDv4 conversation IDs are generated server-side and are difficult to brute force, they...
LibreChat 授权问题漏洞
LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. An authorization issue vulnerability exists in LibreChat version 0.7.8, which stems from improper authorization controls for the conversation sharing feature and could lead to unauthorized access to other users' conversatio...
PT-2025-37108
Name of the Vulnerable Software and Affected Versions: danny-avila/librechat version 0.7.8 Description: Improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Conversation IDs, while generated...
jetty-server: Jetty: Gzip Request Body Buffer Corruption
A flaw was found in Eclipse Jetty. This vulnerability allows corrupted and inadvertent data sharing between requests via a gzip error when inflating a request body. If the request body is malformed, the gzip decompression process can fail, resulting in the application inadvertently using data fro...
CVE-2025-30973
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:46+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-53926
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:46+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-20288
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:46+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-53867
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:45+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-7949
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:44+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-7948
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:44+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-1469
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:44+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-27930
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:42+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-4294
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:42+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-4296
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:42+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-33020
creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:41+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-53634
creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:40+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...
CVE-2025-7412
creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:40+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...
CVE-2025-7522
creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:39+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...