librechat

<0.8.7-r7

GHSA-4xrf-jv44-h6hh

<0.8.7-r7

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

<0.8.7-r7

CVE-2026-18446

<0.8.7-r7

<0.8.7-r7

Open Redirect

<0.8.7-r7

GHSA-7p8r-x3mc-p8w7

<0.8.7-r7

<0.8.7-r7

<0.8.7-r7

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0.8.7-r7

<0.8.7-r7

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

<0.8.7-r5

Uncaught Exception

<0.8.7-r5

GHSA-hvrm-45r6-mjfj

<0.8.7-r5

Use of Less Trusted Source

<0.8.7-r5

<0.8.7-r5

Loop with Unreachable Exit Condition ('Infinite Loop')

<0.8.7-r5

GHSA-7q8q-rj6j-mhjq

<0.8.7-r5

<0.8.7-r4

<0.8.7-r1

Protection Mechanism Failure

<0.8.7-r1

<0.8.7-r1

Insufficient Comparison

<0.8.4-r5

Trust Boundary Violation

<0.8.7-r1

Allocation of Resources Without Limits or Throttling

<0.8.7-r4

GHSA-f38q-mgvj-vph7

<0.8.7-r4

GHSA-cmwh-pvxp-8882

<0.8.7-r4

GHSA-94rc-8x27-4472

<0.8.7-r3

<0.8.7-r3

GHSA-wcpc-wj8m-hjx6

<0.8.7-r2

<0.8.7-r2

<0.8.7-r1

GHSA-8988-4f7v-96qf

<0.8.7-r1

<0.8.7-r1

GHSA-x4vx-rjvf-j5p4

<0.8.7-r1

GHSA-rp9w-3fw7-7cwq

<0.8.7-r1

GHSA-gvmj-g25r-r7wr

<0.8.7-r1

Allocation of Resources Without Limits or Throttling

<0.8.7-r1

GHSA-r47g-fvhr-h676

<0.8.7-r1

GHSA-76mc-f452-cxcm

<0.8.7-r1

GHSA-hpcv-96wg-7vj8

<0.8.7-r1

<0.8.7-r1

GHSA-vxr8-fq34-vvx9

<0.8.7-r1

GHSA-p6gq-j5cr-w38f

<0.8.7-r0

CVE-2026-56761

<0.8.4-r5

Improper Encoding or Escaping of Output

<0.8.6-r4

GHSA-wgpf-jwqj-8h8p

<0.8.6-r4

Insufficient Verification of Data Authenticity

<0.8.6-r4

<0.8.6-r4

<0.8.6-r4

<0.8.6-r4

<0.8.6-r4

Overly Permissive Cross-domain Whitelist

<0.8.6-r4

GHSA-wwfh-h76j-fc44

<0.8.6-r4

Use of Less Trusted Source

<0.8.6-r4

GHSA-88fw-hqm2-52qc

<0.8.6-r4

GHSA-rv63-4mwf-qqc2

<0.8.6-r4

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0.8.6-r1

GHSA-654m-c8p4-x5fp

<0.8.6-r1

GHSA-35jp-ww65-95wh

<0.8.6-r1

GHSA-898c-q2cr-xwhg

<0.8.6-r1

Unintended Proxy or Intermediary ('Confused Deputy')

<0.8.6-r1

GHSA-pjwm-pj3p-43mv

<0.8.6-r1

HTTP Response Splitting

<0.8.6-r1

<0.8.6-r1

GHSA-jggg-4jg4-v7c6

<0.8.5-r1

Improper Handling of Exceptional Conditions

<0.8.5-r1

<0.8.4-r7

<0.8.4-r7

GHSA-848j-6mx2-7j84

<0.8.4-r7

<0.8.4-r7

GHSA-ghcm-xqfw-q4vr

<0.8.4-r7

<0.8.4-r7

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0.8.4-r7

<0.8.4-r7

Loop with Unreachable Exit Condition ('Infinite Loop')

<0.8.4-r7

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0.8.4-r7

<0.8.4-r7

<0.8.4-r7

<0.8.4-r7

<0.8.4-r7

<0.8.4-r7

<0.8.4-r7

GHSA-75px-5xx7-5xc7

<0.8.4-r7

GHSA-66ff-xgx4-vchm

<0.8.4-r7

GHSA-xcj9-5m2h-648r

<0.8.4-r7

Improper Handling of Unicode Encoding

<0.8.4-r7

GHSA-q6x5-8v7m-xcrf

<0.8.4-r7

GHSA-jvwf-75h9-cwgg

<0.8.4-r7

<0.8.4-r7

<0.8.4-r7

<0.8.4-r7

<0.8.4-r7

<0.8.4-r7

Deserialization of Untrusted Data

<0.8.4-r7

GHSA-3q49-cfcf-g5fm

<0.8.4-r6

Information Exposure Through Caching

<0.8.4-r6

Improper Validation of Specified Quantity in Input

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

Improperly Controlled Modification of Dynamically-Determined Object Attributes

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0.8.4-r6

GHSA-3w6x-2g7m-8v23

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

<0.8.4-r6

Improperly Controlled Modification of Dynamically-Determined Object Attributes

<0.8.4-r6

XML Injection

<0.8.4-r6

Information Exposure

<0.8.4-r5

<0.8.4-r5

Improperly Controlled Modification of Dynamically-Determined Object Attributes

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

HTTP Response Splitting

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

Incorrect Behavior Order: Validate Before Canonicalize

<0.8.4-r5

GHSA-wmmm-f939-6g9c

<0.8.4-r5

GHSA-jvff-x2qm-6286

<0.8.4-r5

CVE-2026-4800

<0.8.4-r5

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0.8.4-r5

Unintended Proxy or Intermediary ('Confused Deputy')

<0.8.4-r5

<0.8.4-r5

<0.8.4-r5

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

Improper Validation of Specified Quantity in Input

<0.8.4-r3

<0.8.4-r3

Off-by-one Error

<0.8.4-r3

Loop with Unreachable Exit Condition ('Infinite Loop')

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r3

<0.8.4-r5

<0.8.4-r3

<0.8.4-r5

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0.8.4-r3

GHSA-4992-7rv2-5pvq

<0.8.4-r3

CVE-2026-1525

<0.8.4-r3

Inappropriate Comment Style

<0.8.3-r1

Improper Handling of URL Encoding (Hex Encoding)

<0.8.3-r1

GHSA-w7fw-mjwx-w883

<0.8.3-r1

GHSA-5pq2-9x2x-5p6w

<0.8.3-r1

CVE-2026-2391

<0.8.3-r1

Direct Request ('Forced Browsing')

<0.8.3-r1

<0.8.3-r1

<0.8.3-r1

<0.8.3-r0

<0.8.3-r0

<0.8.3-r0

GHSA-wc8c-qw6v-h7f6

<0.8.3-r0

Incorrect Authorization

<0.8.3-r0

Directory Traversal

<0.8.3-r0

<0.8.3-r0

GHSA-vpq2-c234-7xj6

<0.8.3-r0

GHSA-ph5j-38mg-j6hp

<0.8.3-r0

<0.8.3-r0

<0.8.3-r0

<0.8.3-r0

<0.8.3-r0

<0.8.3-r0

Improper Certificate Validation

<0.8.3-r0

GHSA-j4j7-vw47-rhfq

<0.8.3-r0

GHSA-7hfw-r8qc-89v4

<0.8.3-r0

<0.8.3-r0

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<0.8.3-r0

GHSA-5c6j-r48x-rmvq

<0.8.3-r0

Improper Certificate Validation

<0.8.3-r0

<0.8.2-r7

<0.8.2-r7

<0.8.2-r7

<0.8.2-r7

<0.8.2-r7

<0.8.2-r7

Algorithmic Complexity

<0.8.2-r6

GHSA-7r86-cg39-jmmj

<0.8.2-r6

<0.8.2-r6

<0.8.2-r6

<0.8.2-r6

<0.8.2-r6

<0.8.2-r6

<0.8.2-r6

<0.8.2-r6

<0.8.2-r6

<0.8.2-r6

<0.8.2-r5

GHSA-3ppc-4f35-3m26

<0.8.2-r5

GHSA-2g4f-4pwh-qvx6

<0.8.2-r4

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<0.8.2-r4

GHSA-37qj-frw5-hhjh

<0.8.2-r3

<0.8.2-r3

<0.8.2-r3

GHSA-jmr7-xgp7-cmfj

<0.8.2-r3

<0.8.2-r2

Race Condition

<0.8.2-r2

GHSA-8fgc-7cc6-rx7x

<0.8.2-r2

GHSA-43fc-jf86-j433

<0.8.2-r2

Improper Check for Unusual or Exceptional Conditions

<0.8.2-r2

GHSA-345p-7cg4-v4c7

<0.8.2-r2

GHSA-38r7-794h-5758

<0.8.2-r2

<0.8.2-r2

Information Exposure Through Caching

<0.8.2-r1

<0.8.2-r1

GHSA-6wqw-2p9w-4vw4

<0.8.2-r1

Information Exposure

<0.8.2-r1

Incorrect Regular Expression

<0.8.2-r1

GHSA-7h2j-956f-4vf2

<0.8.2-r1

Improper Access Control

<0.8.2-r1

GHSA-9r54-q6cx-xmh5

<0.8.2-r1

<0.8.2-r1

GHSA-w332-q679-j88p

<0.8.2-r1

GHSA-r354-f388-2fhh

<0.8.2-r1

Improper Check or Handling of Exceptional Conditions

<0.8.0-r5

Improper Authorization

<0.8.01-r5

Improper Access Control

<0.8.1-r5

Allocation of Resources Without Limits or Throttling

<0.8.1-r5

<0.8.1-r5

<0.8.1-r5

<0.8.1-r5

<0.8.2-r3

<0.8.1-r5

GHSA-xxjr-mmjv-4gpg

<0.8.2-r3

GHSA-8r9q-7v3j-jr4g

<0.8.1-r4

Improper Validation of Syntactic Correctness of Input

<0.8.1-r4

<0.8.0-r1

Deserialization of Untrusted Data

<0.8.1-r0

<0.8.1-r0

<0.8.1-r0

<0.8.1-r2

<0.8.1-r2

<0.8.1-r0

<0.8.1-r0

<0.8.1-r1

<0.8.1-r1

<0.8.2-r1

<0.8.1-r0