Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filtersLobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code Execution(RCE)
Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion
Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch module
lobe-chat has an Open Redirect
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
@lobehub/chat Server Side Request Forgery vulnerability
lobe-chat implemented an insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)
Lobe Chat API Key Leak
lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability
@lobehub/chat vulnerable to unauthorized access to plugins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.