Vulnerabilidades de Xpf0000
CVEs publicadas que afetam produtos de Xpf0000: 1 registro(s), com severidade, exploração e correções.
CVE-2026-69116
Média · 6.1
CWE-79 10/08/2026
FlyEnv < 4.18.0 Cross-Site Scripting via v-html
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives. Attackers can inject malicious scripts through markdown sources or chat messages that execute in the Electron renderer process with access to Node.js APIs and the filesystem.