https://advisories.gitlab.com/npm/@lobehub/chat/CVE-2024-32964/
lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability | GitLab Advisory...
CVE-2024-32964 lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability: The latest version of lobe-chat(by now v0.141.2) has an unauthorized...
server side request forgerylobe chatapi proxy
https://advisories.gitlab.com/npm/@lobehub/chat/CVE-2024-37895/
Lobe Chat API Key Leak | GitLab Advisory Database (GLAD)
CVE-2024-37895 Lobe Chat API Key Leak: If an attacker can successfully authenticate through SSO/Access Code, they can obtain the real backend API Key by...
lobe chatapi keyleakgitlabadvisory
https://advisories.gitlab.com/npm/@lobehub/lobehub/CVE-2026-39411/
LobeHub: Unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth`...
CVE-2026-39411 LobeHub: Unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header: The webapi authentication layer...