kadet-hub
Image security report: librechat recipe
librechat: grade F, 146 findings, one per advisory and package, in the 1 image of version 1.0.0: CRITICAL 5, HIGH 54, MEDIUM 78, LOW 9, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
registry.librechat.ai/librechat-ai/librechat:v0.8.8@sha256:5b706bcee1ca154a1e2987303aaeca0eb27f97919cccee4bb604226c2f8abf61
CRITICAL 5, HIGH 54, MEDIUM 78, LOW 9, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-106445 | CRITICAL | handlebars | 4.7.9 | 4.7.10 |
| CVE-2026-106446 | CRITICAL | handlebars | 4.7.9 | 4.7.10 |
| CVE-2026-59873 | CRITICAL | tar | 7.5.13 | 7.5.19 |
| CVE-2026-90711 | CRITICAL | proxy-addr | 2.0.7 | 2.0.8 |
| GHSA-cg2g-xh64-v4q7 | CRITICAL | dompurify | 3.4.16 | 3.4.17 |
| CVE-2026-102276 | HIGH | brace-expansion | 5.0.5 | 5.0.10, 3.0.7, 2.1.5, 1.1.19 |
| CVE-2026-102278 | HIGH | brace-expansion | 5.0.5 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 |
| CVE-2026-104850 | HIGH | @modelcontextprotocol/sdk | 1.30.0 | 1.31.0 |
| CVE-2026-107891 | HIGH | musl | 1.2.6-r2 | 1.2.6-r3 |
| CVE-2026-107891 | HIGH | musl-utils | 1.2.6-r2 | 1.2.6-r3 |
| CVE-2026-109383 | HIGH | undici | 6.25.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109383 | HIGH | undici | 7.30.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109461 | HIGH | @azure/msal-node | 5.6.0 | 7.1.0 |
| CVE-2026-109829 | HIGH | undici | 7.30.0 | 7.30.1, 8.12.2 |
| CVE-2026-109869 | HIGH | undici | 6.25.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109869 | HIGH | undici | 7.30.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-111181 | HIGH | body-parser | 2.3.0 | 2.4.0, 1.20.9 |
| CVE-2026-111755 | HIGH | follow-redirects | 1.16.0 | 1.16.1 |
| CVE-2026-111756 | HIGH | follow-redirects | 1.16.0 | 1.16.1 |
| CVE-2026-111767 | HIGH | @modelcontextprotocol/sdk | 1.30.0 | 1.32.0 |
| CVE-2026-111768 | HIGH | @modelcontextprotocol/sdk | 1.30.0 | 1.32.0 |
| CVE-2026-113351 | HIGH | libexpat | 2.8.5-r0 | 2.10.0-r0 |
| CVE-2026-113872 | HIGH | multer | 2.4.0 | 2.5.0 |
| CVE-2026-115506 | HIGH | libexpat | 2.8.5-r0 | 2.10.0-r0 |
| CVE-2026-116689 | HIGH | follow-redirects | 1.16.0 | 1.16.2 |
| CVE-2026-116795 | HIGH | re2js | 2.8.6 | 2.8.7 |
| CVE-2026-117610 | HIGH | libexpat | 2.8.5-r0 | 2.10.0-r0 |
| CVE-2026-118370 | HIGH | libexpat | 2.8.5-r0 | 2.10.0-r0 |
| CVE-2026-12151 | HIGH | undici | 6.25.0 | 6.27.0, 7.28.0, 8.5.0 |
| CVE-2026-13149 | HIGH | brace-expansion | 5.0.5 | 5.0.7, 1.1.16, 2.1.2 |
| CVE-2026-14257 | HIGH | brace-expansion | 5.0.5 | 5.0.8, 3.0.3, 2.1.3, 1.1.17 |
| CVE-2026-19445 | HIGH | pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19445 | HIGH | python3 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19445 | HIGH | python3-pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19445 | HIGH | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19534 | HIGH | undici | 6.25.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-19553 | HIGH | pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19553 | HIGH | python3 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19553 | HIGH | python3-pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19553 | HIGH | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-48815 | HIGH | sigstore | 4.1.0 | 4.1.1 |
| CVE-2026-59874 | HIGH | tar | 7.5.13 | 7.5.18 |
| CVE-2026-69152 | HIGH | brace-expansion | 5.0.5 | 1.1.18, 2.1.4, 3.0.6, 5.0.9 |
| CVE-2026-69192 | HIGH | ip-address | 10.1.0 | 10.3.1 |
| CVE-2026-73566 | HIGH | tar | 7.5.13 | 7.5.21 |
| CVE-2026-77214 | HIGH | libexpat | 2.8.5-r0 | 2.9.0-r0 |
| CVE-2026-82049 | HIGH | pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-82049 | HIGH | python3 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-82049 | HIGH | python3-pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-82049 | HIGH | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-85091 | HIGH | zlib | 1.3.2-r0 | 1.3.2-r1 |
| CVE-2026-87018 | HIGH | undici | 6.25.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-87018 | HIGH | undici | 7.30.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-87776 | HIGH | compression | 1.8.1 | 1.8.2 |
| CVE-2026-93749 | HIGH | source-map-js | 1.2.1 | 1.2.2 |
| CVE-2026-9496 | HIGH | pacote | 21.5.0 | 21.5.1 |
| GHSA-f897-62hf-6gxq | HIGH | @modelcontextprotocol/sdk | 1.30.0 | 1.30.1 |
| GHSA-mrv2-3pqr-j5jr | HIGH | dompurify | 3.4.16 | 3.4.17 |
| GHSA-wq5f-xc86-pv6w | HIGH | sharp | 0.35.4 | 0.35.5 |
| CVE-2026-101911 | MEDIUM | ip-address | 10.1.0 | 10.7.1 |
| CVE-2026-101912 | MEDIUM | ip-address | 10.1.0 | 10.7.1 |
| CVE-2026-101913 | MEDIUM | ip-address | 10.1.0 | 10.5.1 |
| CVE-2026-102277 | MEDIUM | brace-expansion | 5.0.5 | 5.0.12, 3.0.9, 2.1.7, 1.1.21 |
| CVE-2026-102633 | MEDIUM | libexpat | 2.8.5-r0 | 2.9.0-r0 |
| CVE-2026-104844 | MEDIUM | postcss-selector-parser | 6.0.15 | 7.1.6, 6.1.5 |
| CVE-2026-104844 | MEDIUM | postcss-selector-parser | 7.1.1 | 7.1.6, 6.1.5 |
| CVE-2026-104872 | MEDIUM | @opentelemetry/instrumentation-mongoose | 0.54.0 | 0.67.0 |
| CVE-2026-106444 | MEDIUM | handlebars | 4.7.9 | 4.7.10 |
| CVE-2026-109841 | MEDIUM | undici | 7.30.0 | 7.30.1, 8.12.2 |
| CVE-2026-109924 | MEDIUM | undici | 6.25.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109924 | MEDIUM | undici | 7.30.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109932 | MEDIUM | undici | 6.25.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109932 | MEDIUM | undici | 7.30.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-110180 | MEDIUM | fast-uri | 3.1.8 | 2.4.8, 3.1.9, 4.2.3 |
| CVE-2026-110306 | MEDIUM | fast-uri | 3.1.8 | 2.4.8, 3.1.9, 4.2.3 |
| CVE-2026-110816 | MEDIUM | qs | 6.16.0 | 6.16.1 |
| CVE-2026-111757 | MEDIUM | hono | 4.13.7 | 4.13.11 |
| CVE-2026-111769 | MEDIUM | @modelcontextprotocol/sdk | 1.30.0 | 1.32.0 |
| CVE-2026-111771 | MEDIUM | @modelcontextprotocol/sdk | 1.30.0 | 1.32.0 |
| CVE-2026-111997 | MEDIUM | ip-address | 10.1.0 | 10.7.4 |
| CVE-2026-111997 | MEDIUM | ip-address | 10.7.2 | 10.7.4 |
| CVE-2026-113654 | MEDIUM | sanitize-html | 2.17.7 | 2.18.0 |
| CVE-2026-113661 | MEDIUM | sanitize-html | 2.17.7 | 2.18.0 |
| CVE-2026-114583 | MEDIUM | pyc | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-114583 | MEDIUM | python3 | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-114583 | MEDIUM | python3-pyc | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-114583 | MEDIUM | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-115557 | MEDIUM | pyc | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-115557 | MEDIUM | python3 | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-115557 | MEDIUM | python3-pyc | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-115557 | MEDIUM | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-118663 | MEDIUM | @hono/node-server | 2.1.1 | 2.1.3 |
| CVE-2026-118764 | MEDIUM | minimatch | 10.2.5 | 11.0.1 |
| CVE-2026-118764 | MEDIUM | minimatch | 9.0.9 | 11.0.1 |
| CVE-2026-118764 | MEDIUM | minimatch | 9.0.9 | 11.0.1 |
| CVE-2026-118773 | MEDIUM | glob | 10.5.0 | 14.0.2 |
| CVE-2026-118773 | MEDIUM | glob | 10.5.0 | 14.0.2 |
| CVE-2026-118773 | MEDIUM | glob | 13.0.6 | 14.0.2 |
| CVE-2026-12345 | MEDIUM | pyc | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-12345 | MEDIUM | python3 | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-12345 | MEDIUM | python3-pyc | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-12345 | MEDIUM | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.10-r0 |
| CVE-2026-15157 | MEDIUM | undici | 6.25.0 | 6.28.0, 7.29.0, 8.9.0 |
| CVE-2026-15310 | MEDIUM | pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-15310 | MEDIUM | python3 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-15310 | MEDIUM | python3-pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-15310 | MEDIUM | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-15806 | MEDIUM | pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-15806 | MEDIUM | python3 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-15806 | MEDIUM | python3-pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-15806 | MEDIUM | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-16728 | MEDIUM | undici | 6.25.0 | 6.28.0, 7.29.0, 8.9.0 |
| CVE-2026-16729 | MEDIUM | undici | 6.25.0 | 6.28.0, 7.29.0, 8.9.0 |
| CVE-2026-17084 | MEDIUM | pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-17084 | MEDIUM | python3 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-17084 | MEDIUM | python3-pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-17084 | MEDIUM | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19672 | MEDIUM | pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19672 | MEDIUM | python3 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19672 | MEDIUM | python3-pyc | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-19672 | MEDIUM | python3-pycache-pyc0 | 3.14.7-r1 | 3.14.8-r0 |
| CVE-2026-42338 | MEDIUM | ip-address | 10.1.0 | 10.1.1 |
| CVE-2026-45149 | MEDIUM | brace-expansion | 5.0.5 | 5.0.6 |
| CVE-2026-4738 | MEDIUM | zlib | 1.3.2-r0 | 1.4-r0 |
| CVE-2026-48758 | MEDIUM | @sigstore/core | 3.2.0 | 3.2.1 |
| CVE-2026-48816 | MEDIUM | @sigstore/verify | 3.1.0 | 3.1.1 |
| CVE-2026-53655 | MEDIUM | tar | 7.5.13 | 7.5.16 |
| CVE-2026-59871 | MEDIUM | tar | 7.5.13 | 7.5.18 |
| CVE-2026-59875 | MEDIUM | tar | 7.5.13 | 7.5.17 |
| CVE-2026-85024 | MEDIUM | undici | 6.25.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-87029 | MEDIUM | undici | 7.30.0 | 7.30.1, 8.12.2 |
| CVE-2026-9679 | MEDIUM | undici | 6.25.0 | 6.27.0, 7.28.0, 8.5.0 |
| GHSA-4ffr-jq9g-5ffx | MEDIUM | nodemailer | 10.0.12 | 10.0.13 |
| GHSA-85x2-q946-cp5h | MEDIUM | nodemailer | 10.0.12 | 10.1.4 |
| GHSA-8c8m-p3m8-cjg8 | MEDIUM | nodemailer | 10.0.12 | 10.1.4 |
| GHSA-g73g-hqqh-jr95 | MEDIUM | nodemailer | 10.0.12 | 10.0.13 |
| GHSA-m943-m63m-w62w | MEDIUM | nodemailer | 10.0.12 | 10.1.4 |
| CVE-2026-103923 | LOW | katex | 0.16.28 | 0.18.2 |
| CVE-2026-110095 | LOW | fast-uri | 3.1.8 | 2.4.8, 3.1.9, 4.2.3 |
| CVE-2026-110725 | LOW | fast-uri | 3.1.8 | 2.4.8, 3.1.9, 4.2.3 |
| CVE-2026-113657 | LOW | sanitize-html | 2.17.7 | 2.18.0 |
| CVE-2026-11525 | LOW | undici | 6.25.0 | 6.27.0, 7.28.0, 8.5.0 |
| CVE-2026-18540 | LOW | undici | 6.25.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-6733 | LOW | undici | 6.25.0 | 6.27.0, 7.28.0, 8.5.0 |
| CVE-2026-9358 | LOW | postcss-selector-parser | 7.1.1 | 6.1.3, 7.1.3 |
| GHSA-c6gr-qvv4-5v3f | LOW | dompurify | 3.4.16 | 3.4.17 |