The vulnerability of the useMarkdown component in the AIRI utility allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the useMarkdown component in the AIRI utility involves improper handling of code generation. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting XSS attacks...

CVE-2025-59053 AIRI's character card/chat UI is vulnerable to XSS and can lead to RCE

AIRI is a self-hosted, artificial intelligence based Grok Companion. In v0.7.2-beta.2 in the packages/stage-ui/src/components/MarkdownRenderer.vue path, the Markdown content is processed using the useMarkdown composable, and the processed HTML is rendered directly into the DOM using v-html. An...

CVE-2025-59053: Improper Control of Generation of Code

AIRI is a self-hosted, artificial intelligence based Grok Companion. In v0.7.2-beta.2 in the packages/stage-ui/src/components/MarkdownRenderer.vue path, the Markdown content is processed using the useMarkdown composable, and the processed HTML is rendered directly into the DOM using v-html. An...