@lobehub/chat vulnerabilities (npm)
11 vulnerabilities.
-
@lobehub/chatnpm LobeHub Vulnerable to Improper Authorization in Presigned Upload 5.7 Medium -
@lobehub/chatnpm Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion 3.7 Low -
@lobehub/chatnpm Lobe Chat has Cross-Site Scripting (XSS) issue that may escalate to Remote Code Execution (RCE) 6.4 Medium -
@lobehub/chatnpm SSRF in lobehub/lobe-chat with native web fetch module 3.0 Low -
@lobehub/chatnpm lobe-chat has an Open Redirect 4.3 Medium -
@lobehub/chatnpm Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages 6.8 Medium -
@lobehub/chatnpm ssrf vulnerability in lobe-chat 8.1 High -
@lobehub/chatnpm Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964) 9.0 Critical -
@lobehub/chatnpm API Key Leak in lobe-chat 5.7 Medium -
@lobehub/chatnpm lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability 9.0 Critical -
@lobehub/chatnpm Lobe Chat unauthorized access to plugins 5.3 Medium