LO
Product
lobehub
9
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 6Low 0
Watch
Add lobehub to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59095 | 7.7 | Jul 2 | LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl Affected: before 2.2.10 |
| CVE-2026-39411 | 7.1 | Apr 8 | LobeHub has an unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header Affected: < 2.1.48 |
Showing 2