<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: lobehub</title><description>Every new CVE for lobehub.</description><link>https://agentprime.io/</link><item><title>CVE-2026-85621: LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu</title><link>https://agentprime.io/advisories/CVE-2026-85621/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85621/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 14:32:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59100: LobeChat 2.2.9 - Broken Object Level Authorization via Chat-Group Agent Operations</title><link>https://agentprime.io/advisories/CVE-2026-59100/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59100/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jul 2026 19:43:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59098: LobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic Search</title><link>https://agentprime.io/advisories/CVE-2026-59098/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59098/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jul 2026 19:42:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59095: LobeChat &lt; 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl</title><link>https://agentprime.io/advisories/CVE-2026-59095/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59095/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jul 2026 19:41:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58580: LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes</title><link>https://agentprime.io/advisories/CVE-2026-58580/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58580/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jul 2026 19:39:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58578: LobeChat &lt; 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import</title><link>https://agentprime.io/advisories/CVE-2026-58578/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58578/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jul 2026 19:38:21 GMT</pubDate><category>CVE</category></item></channel></rss>