https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T13:17:38.604829+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-31943 CVE-2026-31943 — LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP 2026-10-18T13:17:38.606235+00:00

Affected: danny-avila LibreChat

LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateIP()` in `packages/api/src/auth/domain.ts` fails to detect IPv4-mapped IPv6 addresses in their hex-normalized form, allowing any authenticated user to bypass SSRF protection and make the server issue HTTP requests to internal network resources — including cloud metadata services (e.g., AWS `169.254.169.254`), loopback, and RFC1918 ranges. Version 0.8.3 fixes the issue.