@lobehub/lobehub vulnerabilities (npm)
3 vulnerabilities.
-
@lobehub/lobehubnpm LobeHub: Unauthenticated SSRF in `/webapi/proxy` 9.0 Critical -
@lobehub/lobehubnpm LobeHub: Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE) 6.2 Medium -
@lobehub/lobehubnpm LobeHub has an unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header 5.0 Medium