Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-crqj-2v3f-c8g9

Опубликовано: 02 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

A vulnerability in danny-avila/librechat allows attackers to exploit the unrestricted Fork Function in /api/convos/fork to fork numerous contents rapidly. If the forked content includes a Mermaid graph with a large number of nodes, it can lead to a JavaScript heap out of memory error upon service restart, causing a denial of service. This issue affects the latest version of the product.

A vulnerability in danny-avila/librechat allows attackers to exploit the unrestricted Fork Function in /api/convos/fork to fork numerous contents rapidly. If the forked content includes a Mermaid graph with a large number of nodes, it can lead to a JavaScript heap out of memory error upon service restart, causing a denial of service. This issue affects the latest version of the product.

EPSS

Процентиль: 1%
0.00012
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.7
nvd
6 дней назад

A vulnerability in danny-avila/librechat allows attackers to exploit the unrestricted Fork Function in `/api/convos/fork` to fork numerous contents rapidly. If the forked content includes a Mermaid graph with a large number of nodes, it can lead to a JavaScript heap out of memory error upon service restart, causing a denial of service. This issue affects the latest version of the product.

EPSS

Процентиль: 1%
0.00012
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-400