Description
A vulnerability in danny-avila/librechat allows attackers to exploit the unrestricted Fork Function in `/api/convos/fork` to fork numerous contents rapidly. If the forked content includes a Mermaid graph with a large number of nodes, it can lead to a JavaScript heap out of memory error upon service restart, causing a denial of service. This issue affects the latest version of the product.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| danny-avila | danny-avila/librechat | unspecified – < v0.7.9 | v0.7.9 |