CVE-2024-11172 — Denial of Service in danny-avila/librechat
A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The midd…
Published: 2025-03-20 · CVSS: 7.5 · CVSS 3.0
A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware `checkBan` is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This issue is fixed in version 0.7.6.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7