| Package | Affected versions | Patched versions |
|---|---|---|
| prompts.chat | < 2026-03-24 | 2026-03-24 |
prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit non-deterministic username resolution to impersonate victim accounts, replace profile content on canonical URLs, and inject attacker-controlled metadata and content across the platform.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free