CVE Intelligence

OvidijusParsiunas Deep Chat vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting OvidijusParsiunas Deep Chat: 1 record(s), with affected versions and fixes.

CVE-2026-108852 Medium · 4.7 CWE-79 Oct 11, 2026
Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.