Search results

[Security] SSRF via Proxy Endpoint

Status: Open.

#6771 In ChatGPTNextWeb/NextChat;

· icysun opened on May 7, 2026

🔬 Integration Proposal: CAJAL — Local Scientific Paper Model for ChatGPT-Next-Web

Status: Open.

#6769 In ChatGPTNextWeb/NextChat;

· Agnuxo1 opened on May 3, 2026

Unauthenticated Remote Code Execution

Status: Open.

#6757 In ChatGPTNextWeb/NextChat;

· August829 opened on Apr 17, 2026

Permissive CORS Wildcard Policy on All API Endpoints Enabling Cross-Origin Exploitation

bugSomething isn't workingSomething isn't working

Status: Open.

#6756 In ChatGPTNextWeb/NextChat;

· August829 opened on Apr 17, 2026

[Security] Server-Side Request Forgery (SSRF) via Open Proxy Fallback (x-base-url Header)

Status: Open.

#6754 In ChatGPTNextWeb/NextChat;

· YLChen-007 opened on Apr 13, 2026

[Security] Server-Side Request Forgery (SSRF) and Cloudflare API Token Leakage via Path Traversal in Artifacts Endpoint

Status: Open.

#6753 In ChatGPTNextWeb/NextChat;

· YLChen-007 opened on Apr 13, 2026

[Resource] www.aifast.club - 559+ AI Models, OpenAI-compatible API (GPT-5, Claude, Gemini, Grok...)

Status: Open.

#6752 In ChatGPTNextWeb/NextChat;

· KKWANG4444 opened on Apr 13, 2026

[Bug] 在线版面具无法修改（已付费充值AI）

bugSomething isn't workingSomething isn't working

Status: Open.

#6743 In ChatGPTNextWeb/NextChat;

· lovaxi opened on Apr 9, 2026

[Security] Server-Side Request Forgery (SSRF) via Open Proxy Fallback (x-base-url Header)

Status: Open.

#6742 In ChatGPTNextWeb/NextChat;

· YLChen-007 opened on Apr 7, 2026

[Security] Server-Side Request Forgery (SSRF) and Cloudflare API Token Leakage via Path Traversal in Artifacts Endpoint

Status: Open.

#6741 In ChatGPTNextWeb/NextChat;

· YLChen-007 opened on Apr 7, 2026

Docker 版可否手动更新模型（gpt5, grok-4, grok-imagine-image 之类）

Status: Open.

#6725 In ChatGPTNextWeb/NextChat;

· LoopOptimum opened on Mar 15, 2026

Feature Request: Enable Web Search (Google Search) for Gemini Models

enhancementNew feature or requestNew feature or request

Status: Open.

#6716 In ChatGPTNextWeb/NextChat;

· kkgs-32 opened on Mar 3, 2026