| Package | Affected versions | Patched versions |
|---|---|---|
| langbot | < 4.8.7 | 4.8.7 |
LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scripting (XSS) vulnerability. This issue has been patched in version 4.8.7.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free