Security: lobehub/lobehub
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
IDOR in Knowledge Base File Removal Allows Cross User File DeletionGHSA-j7xp-4mg9-x28r published
Jan 19, 2026 by arvinxxLow -
Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)GHSA-4gpc-rhpj-9443 published
Jan 17, 2026 by arvinxxCritical -
SSRF in lobehub/lobe-chat with native web fetch moduleGHSA-fgx4-p8xf-qhp9 published
Oct 17, 2025 by arvinxxLow -
Open Redirect in lobehub/lobe-chatGHSA-xph5-278p-26qx published
Sep 24, 2025 by arvinxxModerate -
Remote Code Execution via XSS in Chat Messages in Lobe Chat DesktopGHSA-m79r-r765-5f9j published
Sep 18, 2025 by arvinxxModerate -
Insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)GHSA-3fc8-2r3f-8wrg published
Sep 21, 2024 by arvinxxCritical -
Unexpected API Key LeakGHSA-p36r-qxgx-jq2v published
Jun 17, 2024 by arvinxxModerate -
【Critical】`/api/proxy` endpoint ssrf vulnerability in lobe-chatGHSA-mxhq-xw3g-rphc published
May 10, 2024 by arvinxxCritical -
【high】ssrf vulnerability in lobe-chat 1GHSA-2xcc-vm3f-m8rw published
Nov 26, 2024 by arvinxxHigh -
Unauthorized access to chat pluginsGHSA-pf55-fj96-xf37 published
Jan 31, 2024 by arvinxxModerate
Learn more about advisories related to lobehub/lobehub in the GitHub Advisory Database