Skip to content
OpenAdvisories

Vendor

danny-avila

48 known vulnerabilities.

Products

LibreChat 30 danny-avila/librechat 18
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2025-8850

    Insecure API Design in danny-avila/librechat

    In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vul…

    danny-avila danny-avila/librechat