CNNVD-202512-2034 Information
Dec 11, 2025
cve
CNNVD ID
CNNVD-202512-2034
Related CVE
- CNNVD Published: 2025-12-11
Description (Chinese)
LibreChat是Danny Avila个人开发者的一个增强的 ChatGPT 克隆。 LibreChat 0.8.0及之前版本存在跨站脚本漏洞，该漏洞源于未处理JSON解析错误，可能导致跨站脚本攻击。
Description (English)
LibreChat is an enhanced ChatGPT clone of Danny Avila’s personal developer. LibreChat 0.8.0 and previous versions had a cross-site script loophole, which stemmed from the failure to address JSON’s error of interpretation and could lead to a cross-site script attack.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
个人开发者
Published
2025-12-11
Last Modified
2026-02-24
References
https://github.com/danny-avila/LibreChat/security/advisories/GHSA-q6c5-gvj5-c264
Patch
https://github.com/danny-avila/LibreChat/releases
Share on: