- EPSS 1.78%
- Veröffentlicht 23.06.2026 18:18:07
- Zuletzt bearbeitet 25.06.2026 20:18:11
LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.57, the /webapi/proxy endpoint on app.lobehub.com accepts a URL in the POST body and fetches it server-side without any authen...
CVE-2026-42045
- EPSS 0.27%
- Veröffentlicht 12.05.2026 16:47:32
- Zuletzt bearbeitet 19.05.2026 18:19:44
LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.48, when LobeChat processes custom tags in the Render process of src/features/Portal/Artifacts/Body/Renderer/index.tsx, if no ...
CVE-2026-39411
- EPSS 0.13%
- Veröffentlicht 08.04.2026 19:37:43
- Zuletzt bearbeitet 20.04.2026 15:03:17
LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.48, the webapi authentication layer trusts a client-controlled X-lobe-chat-auth header that is only XOR-obfuscated, not signed...