Vulnerabilities

An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, leading to a full denial of service.

In danny-avila/librechat version git 0c2a583, there is an improper input validation vulnerability.

A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server.

An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash.

An improper access control vulnerability in danny-avila/librechat versions prior to 0.7.6 allows authenticated users to delete other users' prompts via the groupid parameter.

A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection.

A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware.