Improper input validation in Danny-avila Librechat

CVE-2025-66451

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prompts via PATCH endpoint for prompt groups (/api/prompts/groups/:groupId). However…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.001 (26.7th percentile) — read the EPSS interpretation.