ChatGPTNextWeb NextChat

• CVE-2026-105238 High 7.3 ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery 0.4%
• CVE-2026-82639 High 7.5 NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure 0.5%
• CVE-2026-7644 High 7.3 ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization 0.3%
• CVE-2026-7643 Medium 4.3 ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy 0.2%
• CVE-2026-7178 High 7.3 ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery 0.3%
• CVE-2026-7177 High 7.3 ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery 0.4%
• CVE-2023-49785 Critical 9.1 NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting 83.2%