{"id":"CGA-7494-jj9m-mcgc","modified":"2026-09-04T16:16:14.805970228Z","published":"2026-09-03T12:27:38Z","upstream":["CVE-2026-68921","GHSA-gcr2-9v8m-gq45"],"references":[{"type":"WEB","url":"https://github.com/dicebear/dicebear/releases/tag/v9.4.3"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68921.json"},{"type":"ADVISORY","url":"https://github.com/dicebear/dicebear/security/advisories/GHSA-gcr2-9v8m-gq45"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68921"},{"type":"FIX","url":"https://github.com/dicebear/dicebear/commit/922946d738c4e77ab6c412e27ede75941fec4b59"}],"affected":[{"package":{"name":"librechat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/librechat?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r11"}]}],"ecosystem_specific":{"components":[{"component_name":"@dicebear/initials","component_version":"9.4.2","component_type":"npm","component_location":"/app/package-lock.json","component_purl":"pkg:npm/%40dicebear%2Finitials@9.4.2","latest_event_status":"fixed","latest_event_timestamp":"2026-09-04T13:03:37Z"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7494-jj9m-mcgc.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}