https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 16:29:11 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-06066 cnvd-2025-06066 https://cve.radiocsirt.org/vuln/cnvd-2025-06066 https://cve.radiocsirt.org/vuln/euvd-2026-255044 EUVD-2026-255044 https://cve.radiocsirt.org/vuln/euvd-2026-255044 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10361 <p>An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /api/files endpoint. This vulnerability arises from improper input validation, allowing path traversal techniques to delete arbitrary files on the server. Attackers can exploit this to bypass security mechanisms and delete files outside the intended directory, including critical system files, user data, or application resources. This vulnerability impacts the integrity and availability of the system.</p> <p>An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /api/files endpoint. This vulnerability arises from improper input validation, allowing path traversal techniques to delete arbitrary files on the server. Attackers can exploit this to bypass security mechanisms and delete files outside the intended directory, including critical system files, user data, or application resources. This vulnerability impacts the integrity and availability of the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10361 https://cve.radiocsirt.org/vuln/ghsa-xcp6-jv5m-jwrm <p>An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /api/files endpoint. This vulnerability arises from improper input validation, allowing path traversal techniques to delete arbitrary files on the server. Attackers can exploit this to bypass security mechanisms and delete files outside the intended directory, including critical system files, user data, or application resources. This vulnerability impacts the integrity and availability of the system.</p> <p>An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /api/files endpoint. This vulnerability arises from improper input validation, allowing path traversal techniques to delete arbitrary files on the server. Attackers can exploit this to bypass security mechanisms and delete files outside the intended directory, including critical system files, user data, or application resources. This vulnerability impacts the integrity and availability of the system.</p> https://cve.radiocsirt.org/vuln/ghsa-xcp6-jv5m-jwrm