LibreChat-AI/LibreChat
main@ e1dfc10Fixes64
CVEs29
Peak severityCritical
Commits6,016
Regression coverage22.6%
Highlights
Authorization Bypass: 22 prior fixes. Scrutinize any change in this area.
packages/api/src/auth/domain.ts: most-fixed (5 issues). Treat as high-risk during review.
59 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
SSRF: 5 historical fix(es) link packages/api/src/auth/domain.ts to SSRF.
Authorization Bypass: 2 historical fix(es) link api/server/middleware/accessResources/canAccessAgentFromBody.js to Authorization Bypass.
Information Disclosure: 2 historical fix(es) link packages/api/src/utils/env.ts to Information Disclosure.
Last analyzed 13 Oct 2026, 21:48 UTC