CVE-2026-23835
1 advisory.
npm/@lobehub/chat CVE-2026-23835: medium
LobeHub Vulnerable to Improper Authorization in Presigned Upload
Action: Upgrade @lobehub/chat to 1.143.3 or later.
npm i @lobehub/chat@1.143.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.143.3 | - |
Fixed versions
| 1.143.3 |
Sources
- osv: GHSA-wrrr-8jcv-wjf5
- https://github.com/lobehub/lobehub/security/advisories/GHSA-wrrr-8jcv-wjf5
- https://nvd.nist.gov/vuln/detail/CVE-2026-23835
- https://github.com/lobehub/lobehub/commit/2c1762b85acb84467ed5e799afe1499cd2f912e6
- https://github.com/lobehub/lobehub
CVE-2026-23835 · published · modified · JSON