Chatgptnextweb Nextchat vulnerabilities

• chatgptnextweb nextchat CVE-2026-118132 CVE-2026-118132 6.1 MediumOctober 27, 2026
• chatgptnextweb nextchat ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery CVE-2026-105238 6.9 MediumOctober 5, 2026
• chatgptnextweb nextchat NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure CVE-2026-82639 8.7 HighAugust 30, 2026
• chatgptnextweb nextchat ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization CVE-2026-7644 6.9 MediumMay 2, 2026
• chatgptnextweb nextchat ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy CVE-2026-7643 5.3 MediumMay 2, 2026
• chatgptnextweb nextchat ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery CVE-2026-7178 6.9 MediumApril 27, 2026
• chatgptnextweb nextchat ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery CVE-2026-7177 6.9 MediumApril 27, 2026
• chatgptnextweb nextchat, chatgpt-next-web +1 more NextChat Server-Side Request Forgery (SSRF) CVE-2024-38514 7.4 HighJune 28, 2024
• chatgptnextweb nextchat NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting CVE-2023-49785 Public exploit EPSS 83.2% 9.1 CriticalMarch 11, 2024