chat vulnerabilities
CVEs whose affected-version data names the chat package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-120315High· 8.8LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile
LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write arbitrary files by supplying unsanitized file names to writeTempFile(). Attackers can create a file record via file.…
▾ Twilightlobehub · chatEPSS 0.44%via CVEORG
CVE-2026-97326High· 7.3PoCA weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d
A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this issue is some unknown functionality of the file chat-server/src/main/java/cn/sinjinsong/chat/server/ChatServer.java of…
▾ Midnightsongxinjianqwe · ChatEPSS 0.28%via NVD