CVE Explorer

CVE-2025-7105

A vulnerability in danny-avila/librechat allows attackers to exploit the unrestricted Fork Function in `/api/convos/fork` to fork numerous contents rapidly. If the forked content includes a Mermaid graph with a large number of nodes, it can lead to a JavaScript heap out of memory error upon service restart, causing a denial of service. This issue affects the latest version of the product.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:18ca951436667f2c3bdc6eaf5b0be11f4811b37ef103d1e802ca8d83b1e4561a

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"danny-avila/librechat","vendor":"danny-avila","versions":[{"lessThan":"v0.7.9","status":"affected","version":"unspecified","versionType":"custom"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:ed7a22175ee616d5dc2dade0e752cb0ba45aa11488a083343442fc552eec6f90 · sha256:da6d0e95b0ab2fcc… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.7,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","version":"3.0"},"metric_type":"cvssV3_0"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:ed7a22175ee616d5dc2dade0e752cb0ba45aa11488a083343442fc552eec6f90 · sha256:da6d0e95b0ab2fcc… · /containers/cna/metrics/0/cvssV3_0

CWE assertions

1 source assertion

{"cweId":"CWE-400","description":"CWE-400 Uncontrolled Resource Consumption","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:ed7a22175ee616d5dc2dade0e752cb0ba45aa11488a083343442fc552eec6f90 · sha256:da6d0e95b0ab2fcc… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"url":"https://github.com/danny-avila/librechat/commit/97a99985fa339db0a21ad63604e0bb8db4442ffc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed7a22175ee616d5dc2dade0e752cb0ba45aa11488a083343442fc552eec6f90 · sha256:da6d0e95b0ab2fcc… · /containers/cna/references/1

{"url":"https://huntr.com/bounties/e44f0740-48bd-443b-8826-528e6afe9e34"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:ed7a22175ee616d5dc2dade0e752cb0ba45aa11488a083343442fc552eec6f90 · sha256:da6d0e95b0ab2fcc… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer