npm nextchat vulnerabilities

Latest npm nextchat CVEs

Newest publication first

1. CVE-2023-49785 NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

   Published 2024-03-11

   Critical·CVSS 9.8 EPSS 83.2%

   NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also wri...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.