LO
Product
lobehub
9
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 6Low 0
Watch
Add lobehub to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85621 | 6.5 | Sep 4 | LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu Affected: through 2.2.15 |
| CVE-2026-59098 | 6.5 | Jul 2 | LobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic Search Affected: through 2.2.9 |
| CVE-2026-58578 | 6.5 | Jul 2 | LobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import Affected: before 2.2.10-canary.15 |
| CVE-2026-42045 | 6.2 | May 12 | LobeHub: Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE) Affected: < 2.1.48 |
| CVE-2026-58580 | 5.9 | Jul 2 | LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes Affected: through 2.2.9 |
| CVE-2026-59100 | 5.0 | Jul 2 | LobeChat 2.2.9 - Broken Object Level Authorization via Chat-Group Agent Operations Affected: through 2.2.9 |
Showing 6