CVE-2026-23733 | lobehub lobe-chat up to 1.136.2 Mermaid Artifact Renderer cross site scripting (GHSA-4gpc-rhpj-9443)

A vulnerability was found in lobehub lobe-chat up to 1.136.2. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component Mermaid Artifact Renderer. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-23733. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.