pkg:npm/@lobehub/lobehub

所有已知漏洞

• CRITICAL9.0CVE-2026-54157LobeHub: Unauthenticated SSRF in `/webapi/proxy`
  from 0, < 2.1.57
• MEDIUM6.2CVE-2026-42045LobeHub has a Cross-Site Scripting issue that escalates to Remote Code Execution
  from 0, <= 2.1.26
• MEDIUM5.0CVE-2026-39411LobeHub: Unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header
  from 0, < 2.1.48