Skip to content
OpenAdvisories

Vendor

ChatGPTNextWeb

8 known vulnerabilities.

Products

NextChat 7 ChatGPT-Next-Web 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-7643

    ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy

    A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be la…

    ChatGPTNextWeb NextChat