6 matches found
CVE-2026-41318 AnythingLLM vulnerable to stored DOM XSS in chart caption renderer - LLM-driven prompt injection produces executable HTML via unsanitized renderMarkdown(content.caption) in Chartable component
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, AnythingLLM's in-chat markdown renderer has an unsafe custom rule for images that interpolates the markdown image's alt text into an HTML alt="..."...
CVE-2026-41318 AnythingLLM vulnerable to stored DOM XSS in chart caption renderer - LLM-driven prompt injection produces executable HTML via unsanitized renderMarkdown(content.caption) in Chartable component
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, AnythingLLM's in-chat markdown renderer has an unsafe custom rule for images that interpolates the markdown image's alt text into an HTML alt="..."...
CVE-2026-41318: Improper Neutralization of Input During Web Page Generation
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, AnythingLLM's in-chat markdown renderer has an unsafe custom rule for images that interpolates the markdown image's alt text into an HTML alt="..."...
Malicious code in chartable-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b387b9a592b8ed553ec2f990ed3f9cf329be2772c324ac75bd78e6ba9acecfcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in chartable-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47474 Malicious code in chartable-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b387b9a592b8ed553ec2f990ed3f9cf329be2772c324ac75bd78e6ba9acecfcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...