lobe-chat implemented an insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)

Description

SSRF protection implemented in https://github.com/lobehub/lobe-chat/blob/main/src/app/api/proxy/route.ts does not consider redirect and could be bypassed when attacker provides external malicious url which redirects to internal resources like private network or loopback address.

Recommendation

Update the @lobehub/chat package to the latest compatible version. Followings are version details:

• Affected version(s): <= 1.19.12
• Patched version(s): 1.19.13

References

• GHSA-3fc8-2r3f-8wrg
• CVE-2024-47066
• CWE-918
• CAPEC-310
• OWASP 2021-A10
• OWASP 2021-A6

Related Issues

• Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages - CVE-2025-59417
• axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL - CVE-2025-27152
• snowflake-sdk may incorrectly validate temporary credential cache file permissions - CVE-2025-24791
• @lobehub/chat Server Side Request Forgery vulnerability - CVE-2024-32965

Tags:

npm

@lobehub/chat