Vulnerabilidades do OvidijusParsiunas Deep Chat

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam OvidijusParsiunas Deep Chat: 1 registro(s), com versões afetadas e correções.

CVE-2026-108852 Média · 4.7 CWE-79 11/10/2026

Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass

Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.