CVE-2026-54157
1 advisory.
npm/@lobehub/lobehub CVE-2026-54157: critical 9, EPSS 1.83%
LobeHub: Unauthenticated SSRF in `/webapi/proxy`
Action: Upgrade @lobehub/lobehub to 2.1.57 or later.
npm i @lobehub/lobehub@2.1.57Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.57 | - |
Fixed versions
| 2.1.57 |
Sources
- osv: GHSA-xmwj-c75x-6346
- https://github.com/lobehub/lobehub/security/advisories/GHSA-xmwj-c75x-6346
- https://nvd.nist.gov/vuln/detail/CVE-2026-54157
- https://github.com/lobehub/lobehub
CVE-2026-54157 · published · modified · JSON