Skip to content
OpenAdvisories

Package · npm

nextchat

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2023-49785 Public exploit EPSS 83%

    NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

    NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP e…

    ChatGPTNextWeb NextChat nextchat npm