Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/lnbits@0.10.3.dev1
purl pkg:pypi/lnbits@0.10.3.dev1
Next non-vulnerable version 0.12.12
Latest non-vulnerable version 0.12.12
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-67ee-6hu6-mue1
Aliases:
CVE-2025-32013
PYSEC-2025-16
LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback URL parameter and makes an HTTP request to that URL using the httpx library with redirect following enabled. The application doesn't properly validate the callback URL, allowing attackers to specify internal network addresses and access internal resources.
0.12.12
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:22:56.445056+00:00 Pypa Importer Affected by VCID-67ee-6hu6-mue1 https://github.com/pypa/advisory-database/blob/main/vulns/lnbits/PYSEC-2025-16.yaml 38.6.0