Threats affecting pkg:npm/chat

LobeHub Chat versions from 1.84.26 up to but not including 2.1.49 contain a path traversal vulnerability. Authenticated users can exploit this flaw by supplying unsanitized file names to the writeTempFile() function, enabling arbitrary file writes. This can lead to overwriting critical application files such as startServer.js, potentially resulting in remote code execution or denial of service. The vulnerability is fixed in version 2.1.49.