Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: sdelements Clear all filters
TI-2026-47399 CVE-2026-66751 · GHSA-r5q3-g4qh-p8mp

Let's Chat 0.3.0 - 0.4.8 Improper Authorization via DELETE /rooms/:room

Priority MEDIUM 57

Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows any authenticated user to archive any room on the server by sending a DELETE request to the rooms handler without ownership veri…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-07-28 No fix listed CWE-862
TI-2026-47398 CVE-2026-66750 · GHSA-mf6v-fwp6-46g3

Let's Chat 0.3.0 - 0.4.8 Broken Access Control File Disclosure via GET /files route

Priority MEDIUM 57

Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows authenticated attackers to download file attachments from private and password-protected rooms they are not a member of by exploit…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00346 Published 2026-07-28 No fix listed CWE-862
TI-2026-47397 CVE-2026-66749 · GHSA-qjpw-62vp-8j4q

Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup

Priority LOW 32

Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated attackers to crash the server by supplying a valid 24-character hex string room parameter that matches no document in the…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00436 Published 2026-07-28 No fix listed CWE-476