Skip to content
OpenAdvisories

Package · npm

@lobehub/chat

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2024-32965 EPSS 26%

    ssrf vulnerability in lobe-chat

    Lobe Chat is an open-source, AI chat framework. Versions of lobe-chat prior to 1.19.13 have an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive informa…

    lobehub lobe-chat @lobehub/chat npm