Advisories · Technology
ChatGPTNextWeb NextChat.
Every CVE that names ChatGPTNextWeb NextChat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery
- ChatGPTNextWeb NextChat
- Server-side request forgery (SSRF)
- CVSS 8.7 High
NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure
- ChatGPTNextWeb NextChat
- CWE-20
- CVSS 6.9 Medium
ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization
- ChatGPTNextWeb NextChat
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy
- ChatGPTNextWeb NextChat
- CWE-346
- CWE-942
- CVSS 6.9 Medium
ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery
- ChatGPTNextWeb NextChat
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery
- ChatGPTNextWeb NextChat
- Server-side request forgery (SSRF)