ChatGPTNextWeb NextChat vulnerabilities
7 published CVEs name ChatGPTNextWeb NextChat among the affected products.
- 7Published CVEs7 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105238
ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery
ChatGPTNextWeb · NextChat
Medium6.9 - CVE-2026-82639
NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure
ChatGPTNextWeb · NextChat
High8.7 - CVE-2026-7644
ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization
ChatGPTNextWeb · NextChat
Medium6.9 - CVE-2026-7643
ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy
ChatGPTNextWeb · NextChat
Medium5.3 - CVE-2026-7178
ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery
ChatGPTNextWeb · NextChat
Medium6.9 - CVE-2026-7177
ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery
ChatGPTNextWeb · NextChat
Medium6.9 - CVE-2023-49785
NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting
ChatGPTNextWeb · NextChat
Critical9.1