https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:59:46.899441+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330349 EUVD-2026-330349 2026-10-02T10:59:46.936493+00:00 EUVD-2026-330349 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54033 fkie_cve-2026-54033 2026-10-02T10:59:46.936529+00:00

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, LibreChat allows users to configure custom OpenAI-compatible API endpoints by setting a baseURL. This URL is used to construct HTTP requests without any SSRF validation — no private IP check, no scheme restriction, no DNS pinning. An authenticated user can set baseURL to internal network addresses. This vulnerability is fixed in 0.8.4-rc1.