Danny-avila vulnerabilities

Products

• Librechat 31
• Danny-avila/librechat 18

Newest

• danny-avila librechat LibreChat: Incomplete Fix for CVE-2024-11171 — Conversation Import Multer Instance Missing File Size Limits CVE-2026-54024 6.5 MediumJune 25, 2026
• danny-avila librechat LibreChat: Stored XSS via unescaped image alt text in markdown artifact preview CVE-2026-54025 5.4 MediumJune 25, 2026
• danny-avila librechat LibreChat: Image Upload Route Bypasses Agent Permission Check — Incomplete Fix for File Upload Authorization CVE-2026-54027 6.5 MediumJune 25, 2026
• danny-avila librechat LibreChat: IDOR in Message Deletion — Incomplete Fix for CVE-2024-41703 Leaves deleteMessages() Without User Filter CVE-2026-54029 5.3 MediumJune 25, 2026
• danny-avila librechat LibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLs CVE-2026-54033 7.7 HighJune 25, 2026
• danny-avila librechat LibreChat: Incomplete Fix for CVE-2025-7105 — /api/convos/duplicate Lacks Rate Limiting Applied to /api/convos/fork CVE-2026-54037 6.5 MediumJune 25, 2026
• danny-avila librechat LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow CVE-2026-54030 8.0 HighJune 25, 2026
• danny-avila librechat LibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA Bypass CVE-2026-54040 5.9 MediumJune 25, 2026
• danny-avila librechat LibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP Verification CVE-2026-54036 5.3 MediumJune 25, 2026
• danny-avila librechat LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents CVE-2026-44654 5.7 MediumJune 2, 2026
• danny-avila librechat LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets CVE-2026-44653 6.5 MediumJune 2, 2026
• danny-avila librechat LibreChat Exfiltrates Server Secrets via MCP Server URL Injection CVE-2026-32625 9.6 CriticalJune 2, 2026
• danny-avila librechat LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys CVE-2026-31942 7.1 HighJune 2, 2026
• danny-avila librechat LibreChat Affected by Arbitrary File Write via `execute_code` Artifact Filename Traversal CVE-2026-34371 6.3 MediumApril 7, 2026
• danny-avila librechat LibreChat's MCP Server Header Injection Enables OAuth Token Theft CVE-2026-31951 6.8 MediumMarch 27, 2026
• danny-avila librechat LibreChat's IDOR in SSE Stream Subscription Allows Reading Other Users' Chats CVE-2026-31950 5.3 MediumMarch 27, 2026
• danny-avila librechat LibreChat Server-Side Request Forgery using DNS resolution CVE-2026-31945 7.7 HighMarch 27, 2026
• danny-avila librechat LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP CVE-2026-31943 8.5 HighMarch 27, 2026
• danny-avila librechat In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API. CVE-2026-33265 6.3 MediumMarch 18, 2026
• danny-avila librechat LibreChat RAG API Authentication Bypass CVE-2025-41258 8.0 HighMarch 18, 2026
• danny-avila librechat LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos CVE-2026-31949 6.5 MediumMarch 13, 2026
• danny-avila librechat LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link CVE-2026-31944 7.6 HighMarch 13, 2026
• danny-avila danny-avila/librechat Denial of Service via JavaScript Memory Overflow in danny-avila/librechat CVE-2025-7105 5.7 MediumFebruary 2, 2026
• danny-avila librechat LibreChat MCP Stdio Remote Command Execution CVE-2026-22252 9.1 CriticalJanuary 12, 2026
• danny-avila librechat LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions CVE-2025-69222 9.1 CriticalJanuary 7, 2026
• danny-avila librechat LibreChat has Insufficient Access Control for Agent Permission Queries CVE-2025-69221 4.3 MediumJanuary 7, 2026
• danny-avila librechat LibreChat has Insufficient Access Control for Agent Files CVE-2025-69220 7.1 HighJanuary 7, 2026
• danny-avila librechat LibreChat's lack of JSON parsing error handling can lead to XSS CVE-2025-66452 5.3 MediumDecember 11, 2025
• danny-avila librechat LibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission Changes CVE-2025-66451 5.3 MediumDecember 11, 2025
• danny-avila librechat LibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image Upload CVE-2025-66450 8.6 HighDecember 11, 2025
• danny-avila librechat LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability CVE-2025-66201 8.6 HighNovember 29, 2025
• danny-avila danny-avila/librechat, librechat +1 more Denial of Service in danny-avila/librechat CVE-2025-8849 5.4 MediumOctober 30, 2025
• danny-avila danny-avila/librechat, librechat +1 more Insecure API Design in danny-avila/librechat CVE-2025-8850 3.1 LowOctober 30, 2025
• danny-avila danny-avila/librechat, librechat +1 more HTML Injection in Accept-Language Header in danny-avila/librechat CVE-2025-8848 4.8 MediumOctober 22, 2025
• danny-avila danny-avila/librechat, librechat +1 more Mass Assignment in danny-avila/librechat CVE-2025-7104 4.3 MediumSeptember 29, 2025
• danny-avila danny-avila/librechat, librechat +1 more Authorization Bypass due to Incorrect Access Control in danny-avila/librechat CVE-2025-7106 5.3 MediumSeptember 23, 2025
• danny-avila danny-avila/librechat, librechat +1 more Improper Authorization in danny-avila/librechat CVE-2025-6088 4.2 MediumSeptember 11, 2025
• danny-avila librechat LibreChat exposes arbitrary chats through Meilisearch engine CVE-2025-54868 7.5 HighAugust 5, 2025
• danny-avila danny-avila/librechat, librechat +1 more Mass Assignment in Preset Creation Allows User ID Manipulation in danny-avila/librechat CVE-2024-10359 4.6 MediumMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more Unhandled Exception in danny-avila/librechat CVE-2024-11173 6.5 MediumMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more Improper Access Control in danny-avila/LibreChat CVE-2024-10363 5.4 MediumMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more Improper Input Validation in danny-avila/librechat CVE-2024-11171 7.5 HighMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more Denial of Service in danny-avila/librechat CVE-2024-11172 7.5 HighMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more Unhandled Exception Leading to Server Crash in danny-avila/librechat CVE-2024-11169 7.5 HighMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more Improper Access Control in danny-avila/librechat CVE-2024-11167 9.4 CriticalMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more IDOR in delete attachments in danny-avila/librechat CVE-2024-10366 7.6 HighMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more Logs Debug Injection in danny-avila/librechat CVE-2024-12580 4.3 MediumMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more Arbitrary File Deletion via Path Traversal in danny-avila/librechat CVE-2024-10361 8.1 HighMarch 20, 2025
• danny-avila danny-avila/librechat, librechat +1 more Path Traversal in danny-avila/librechat CVE-2024-11170 8.8 HighMarch 20, 2025
• librechat, danny-avila libre chat +1 more LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images. (Work on a... CVE-2024-41704 9.8 CriticalJuly 22, 2024