Read the docs

sdelements

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

sdelements records in CISA KEV

No sdelements vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-47399 CVE-2026-66751 · GHSA-r5q3-g4qh-p8mp

Let's Chat 0.3.0 - 0.4.8 Improper Authorization via DELETE /rooms/:room

Priority MEDIUM 57

Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows any authenticated user to archive any room on the server by sending a DELETE request to the rooms handler without ownership veri…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-07-28 No fix listed CWE-862
TI-2026-47398 CVE-2026-66750 · GHSA-mf6v-fwp6-46g3

Let's Chat 0.3.0 - 0.4.8 Broken Access Control File Disclosure via GET /files route

Priority MEDIUM 57

Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows authenticated attackers to download file attachments from private and password-protected rooms they are not a member of by exploit…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00346 Published 2026-07-28 No fix listed CWE-862
TI-2026-47397 CVE-2026-66749 · GHSA-qjpw-62vp-8j4q

Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup

Priority LOW 32

Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated attackers to crash the server by supplying a valid 24-character hex string room parameter that matches no document in the…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00436 Published 2026-07-28 No fix listed CWE-476
Open these records in search →