Skip to content
OpenAdvisories

Vendor

lnbits

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-32013 Public exploit

    Server-Side Request Forgery via LNURL Authentication Callback in LNbits Lightning Network Payment System

    LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback …