{"action":"Upgrade @lobehub/chat to 1.19.13 or later.","affected":[{"fixed":"1.19.13","introduced":"0"}],"component":"@lobehub/chat","cve_ids":["CVE-2024-32965"],"ecosystem":"npm","epss":0.26131,"exploited":false,"fixed_versions":["1.19.13"],"ghsa_id":"GHSA-2xcc-vm3f-m8rw","id":"tcs_01M5KEVCQF2Z3GTPJEC5HR4HRG","modified_at":"2024-11-26T21:43:24Z","published_at":"2024-11-26T15:39:38Z","references":["https://osv.dev/vulnerability/GHSA-2xcc-vm3f-m8rw","https://github.com/lobehub/lobe-chat/security/advisories/GHSA-2xcc-vm3f-m8rw","https://nvd.nist.gov/vuln/detail/CVE-2024-32965","https://github.com/lobehub/lobe-chat/commit/e960a23b0c69a5762eb27d776d33dac443058faf","https://github.com/lobehub/lobe-chat"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-2xcc-vm3f-m8rw","url":"https://osv.dev/vulnerability/GHSA-2xcc-vm3f-m8rw"}],"summary":"@lobehub/chat Server Side Request Forgery vulnerability"}