Start for Free
npm

@lobehub/lobehub

View on npm registry
3 Total advisories
3 Vulnerabilities
0 Malware

Vulnerabilities

CRITICAL 9.0
npm

CVE-2026-54157

LobeHub: Unauthenticated SSRF in `/webapi/proxy`
MEDIUM 6.2
npm

CVE-2026-42045

LobeHub has a Cross-Site Scripting issue that escalates to Remote Code Execution
MEDIUM 5.0
npm

CVE-2026-39411

LobeHub: Unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes