{"api_version":"v1","generated_at":"2026-10-08T19:20:00+00:00","product":{"cve_count":12,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-lobehub-lobe-chat-21cb892fb321","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"lobe-chat","next_cursor":null,"observations":[{"affected":"\u2264 2.2.13","affected_versions_present":true,"cve_id":"CVE-2026-72594","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72594","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-10T13:26:05.281Z","patch_url":"","primary_source":"","published":"2026-08-10T10:41:57.724Z"},{"affected":"< 1.143.3","affected_versions_present":true,"cve_id":"CVE-2026-23835","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23835","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-30T20:21:57.205Z","patch_url":"","primary_source":"","published":"2026-01-30T20:04:23.284Z"},{"affected":"< 2.0.0-next.193","affected_versions_present":true,"cve_id":"CVE-2026-23522","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23522","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-20T21:35:39.441Z","patch_url":"","primary_source":"","published":"2026-01-19T16:53:32.371Z"},{"affected":"< 2.0.0-next.180","affected_versions_present":true,"cve_id":"CVE-2026-23733","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23733","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-20T20:06:51.723Z","patch_url":"","primary_source":"","published":"2026-01-18T22:56:15.888Z"},{"affected":"< 1.136.2","affected_versions_present":true,"cve_id":"CVE-2025-62505","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62505","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-10-17T18:32:20.732Z","patch_url":"","primary_source":"","published":"2025-10-17T18:18:53.739Z"},{"affected":"lobe-chat: < 1.130.1","affected_versions_present":true,"cve_id":"CVE-2025-59426","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-59426","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-09-25T14:18:27.175Z","patch_url":"https://github.com/lobehub/lobe-chat/commit/70f52a3c1fadbd41a9db0e699d1e44d9965de445","primary_source":"","published":"2025-09-25T14:00:09.629Z"},{"affected":"< 1.129.4","affected_versions_present":true,"cve_id":"CVE-2025-59417","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-59417","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-09-19T17:09:51.521Z","patch_url":"https://github.com/lobehub/lobe-chat/commit/9f044edd07ce102fe9f4b2fb47c62191c36da05c","primary_source":"","published":"2025-09-18T14:38:55.012Z"},{"affected":"< 1.19.13","affected_versions_present":true,"cve_id":"CVE-2024-32965","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32965","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-26T18:48:27.413Z","patch_url":"https://github.com/lobehub/lobe-chat/commit/e960a23b0c69a5762eb27d776d33dac443058faf","primary_source":"","published":"2024-11-26T18:25:56.215Z"},{"affected":"< 1.19.13","affected_versions_present":true,"cve_id":"CVE-2024-47066","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47066","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-23T15:41:22.252Z","patch_url":"https://github.com/lobehub/lobe-chat/commit/e960a23b0c69a5762eb27d776d33dac443058faf","primary_source":"","published":"2024-09-23T15:17:43.364Z"},{"affected":"< 0.162.25","affected_versions_present":true,"cve_id":"CVE-2024-37895","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-37895","fixed":"0.162.25.","last_modified":"2024-08-02T03:57:39.976Z","patch_url":"https://github.com/lobehub/lobe-chat/security/advisories/GHSA-p36r-qxgx-jq2v","primary_source":"","published":"2024-06-17T19:28:31.021Z"},{"affected":"<= 0.150.5","affected_versions_present":true,"cve_id":"CVE-2024-32964","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32964","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T02:27:53.559Z","patch_url":"https://github.com/lobehub/lobe-chat/commit/465665a735556669ee30446c7ea9049a20cc7c37","primary_source":"","published":"2024-05-10T14:49:31.019Z"},{"affected":"< 0.122.4","affected_versions_present":true,"cve_id":"CVE-2024-24566","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24566","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-17T21:29:21.984Z","patch_url":"https://github.com/lobehub/lobe-chat/commit/2184167f09ab68e4efa051ee984ea0c4e7c48fbd","primary_source":"","published":"2024-01-31T16:33:44.129Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"lobehub"}}