Skip to content
OpenAdvisories

Package · PyPI

lnbits

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.3
    CVE-2025-32013 Public exploit

    Server-Side Request Forgery via LNURL Authentication Callback in LNbits Lightning Network Payment System

    LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback …

    lnbits lnbits lnbits PyPI
  • High 8.1
    CVE-2024-34694

    LNbits improperly handles potential network and payment failures when using Eclair backend

    LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal timeout (about 30s) lead to a payment being considered failed, even though it may still be in flight. This vulnerability can lead to a tota…

    lnbits lnbits lnbits PyPI