Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-41703
9.8
CRITICALCVSS v3
Published
July 22, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
LibreChat through 0.7.4-rc1 has incorrect access control for message updates.
danny-avila/LibreChat
GitHubEnhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, GPT-5, Mistral, OpenRouter, Vertex AI, Gemini, Artifacts, AI model switching, message search, Code Interpreter, langchain, DALL-E-3, OpenAPI Actions, Functions, Secure Multi-User Auth, Presets, open-source for self-hosting. Active
GitHubEnhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, GPT-5, Mistral, OpenRouter, Vertex AI, Gemini, Artifacts, AI model switching, message search, Code Interpreter, langchain, DALL-E-3, OpenAPI Actions, Functions, Secure Multi-User Auth, Presets, open-source for self-hosting. Active<= 0.7.3, = 0.7.4NVD