GHSA-W64R-2G3W-W8W4 Coder AgentAPI exposed user chat history via a DNS rebinding attack

Summary AgentAPI prior to version 0.4.0 was susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. Impact An attacker could have gained access to the /messages endpoint served by the Agent API. This allowed for the unauthorized exfiltration of sensitive user...

Coder AgentAPI exposed user chat history via a DNS rebinding attack

Summary AgentAPI prior to version 0.4.0 was susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. Impact An attacker could have gained access to the /messages endpoint served by the Agent API. This allowed for the unauthorized exfiltration of sensitive user...

CVE-2025-59426

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...

CVE-2025-59422

Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/chat-messages?conversationid==10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data an...

Open Redirect

Overview @lobehub/chat is a Lobe Chat - an open-source, high-performance chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application. Affected versions of this package are...

CVE-2025-59422

Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/chat-messages?conversationid=&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query...

CVE-2025-59426

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...

CVE-2025-59426 lobe-chat has an Open Redirect

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...

CVE-2025-59426 lobe-chat has an Open Redirect

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...

CVE-2025-59426 lobe-chat has an Open Redirect

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...

CVE-2025-59426

Lobe Chat (prior to v1.130.1) is vulnerable to an Open Redirect via the OIDC redirect handling that uses X-Forwarded-Host/Host and X-Forwarded-Proto without validation. The code obtains an internal redirect URL and then attempts to coerce it with correctOIDCUrl, falling back to the raw URL if par...

CVE-2025-59422 Dify Has Broken Access Control on Log Message Endpoint Allows Reading of Chats of Others

Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/chat-messages?conversationid=&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query...

CVE-2025-59422 Dify Has Broken Access Control on Log Message Endpoint Allows Reading of Chats of Others

Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/chat-messages?conversationid=&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query...

CVE-2025-59422

CVE-2025-59422 affects Dify (open‑source LLM app platform) in version 1.8.1. A broken access control flaw on the endpoint /console/api/apps/chat-messages?conversation_id=&limit=10 allows users in the same workspace to read other users’ chat messages, including query data and filenames, if the con...

Malicious code in shop-chat-agent (npm)

The package shop-chat-agent was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24fef9fb2ae18a423f86505fc26cb8fb7c6b2c17038ae2833ad9eea5238c79f Any computer that has this package installed or running should be considered fully...

MAL-2025-47567 Malicious code in shop-chat-agent (npm)

The package shop-chat-agent was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24fef9fb2ae18a423f86505fc26cb8fb7c6b2c17038ae2833ad9eea5238c79f Any computer that has this package installed or running should be considered fully...

Malicious Package

Overview shop-chat-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Lobe Chat 安全漏洞

Lobe Chat is an open source, high performance chatbot framework open sourced from LobeHub. A security vulnerability exists in Lobe Chat versions prior to 1.130.1 that stems from the OIDC redirect processing logic constructing redirect URLs based on unvalidated X-Forwarded-Host or Host headers and...

dify 安全漏洞

dify is an open source LLM application development platform from LangGenius Open Source. A security vulnerability exists in version 1.8.1 of dify, which stems from improper access control in the /console/api/apps/chat-messages endpoint, which could lead to a user in the same workspace reading cha...

PT-2025-39373

Name of the Vulnerable Software and Affected Versions Dify version 1.8.1 Description A broken access control issue exists in Dify version 1.8.1. This allows users within the same workspace to read chat messages belonging to other users. The issue is present on the /console/api/apps/APP...