Danny-avila vulnerabilities
48 CVEs and advisories name Danny-avila as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-8849Denial of Service in danny-avila/librechat
- CVE-2025-8850Insecure API Design in danny-avila/librechat
- CVE-2025-8848HTML Injection in Accept-Language Header in danny-avila/librechat
- CVE-2025-7104Mass Assignment in danny-avila/librechat
- CVE-2025-7106Authorization Bypass due to Incorrect Access Control in danny-avila/librechat
- CVE-2025-6088Improper Authorization in danny-avila/librechat
- CVE-2025-54868LibreChat exposes arbitrary chats through Meilisearch engine
- CVE-2024-10359Mass Assignment in Preset Creation Allows User ID Manipulation in danny-avila/librechat
- CVE-2024-11173Unhandled Exception in danny-avila/librechat
- CVE-2024-10363Improper Access Control in danny-avila/LibreChat
- CVE-2024-11171Improper Input Validation in danny-avila/librechat
- CVE-2024-11172Denial of Service in danny-avila/librechat
- CVE-2024-11169Unhandled Exception Leading to Server Crash in danny-avila/librechat
- CVE-2024-11167Improper Access Control in danny-avila/librechat
- CVE-2024-10366IDOR in delete attachments in danny-avila/librechat
- CVE-2024-12580Logs Debug Injection in danny-avila/librechat
- CVE-2024-10361Arbitrary File Deletion via Path Traversal in danny-avila/librechat
- CVE-2024-11170Path Traversal in danny-avila/librechat