{"action":"Upgrade @lobehub/chat to 1.19.13 or later.","affected":[{"fixed":"1.19.13","introduced":"0"}],"component":"@lobehub/chat","cve_ids":["CVE-2024-47066"],"ecosystem":"npm","epss":0.1186,"exploited":false,"fixed_versions":["1.19.13"],"ghsa_id":"GHSA-3fc8-2r3f-8wrg","id":"tcs_01M5KEX4V2A2XJK8YRN8C4P1V7","modified_at":"2026-02-04T04:36:26.204512Z","published_at":"2024-09-23T20:30:11Z","references":["https://osv.dev/vulnerability/GHSA-3fc8-2r3f-8wrg","https://github.com/lobehub/lobe-chat/security/advisories/GHSA-3fc8-2r3f-8wrg","https://github.com/lobehub/lobe-chat/security/advisories/GHSA-mxhq-xw3g-rphc","https://nvd.nist.gov/vuln/detail/CVE-2024-47066","https://github.com/lobehub/lobe-chat/commit/e960a23b0c69a5762eb27d776d33dac443058faf","https://github.com/lobehub/lobe-chat","https://github.com/lobehub/lobe-chat/blob/main/src/app/api/proxy/route.ts"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-3fc8-2r3f-8wrg","url":"https://osv.dev/vulnerability/GHSA-3fc8-2r3f-8wrg"}],"summary":"lobe-chat implemented an insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)"}