@lobehub/lobehub
LobeHub - an open-source,comprehensive AI Agent framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application.
Security Advisories for @lobehub/lobehub in npm
Moderate
4 months ago
LobeHub has a Cross-Site Scripting issue that escalates to Remote Code Execution
npm
@lobehub/lobehub
Moderate
5 months ago
LobeHub: Unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header
npm
@lobehub/lobehub
Potential
Low
11 months ago
Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch module
npm
@lobehub/chat
Potential
Potential
Moderate
11 months ago
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
npm
@lobehub/chat
Potential
Potential
Moderate
almost 2 years ago
lobe-chat implemented an insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)
npm
@lobehub/chat
Potential
Potential
Critical
over 2 years ago
lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability
npm
@lobehub/chat
Potential
Moderate
over 2 years ago
@lobehub/chat vulnerable to unauthorized access to plugins
npm
@lobehub/chat