7 matches found
CVE-2026-108852
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to...
EUVD-2026-97003
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to...
CVE-2026-108852 Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to...
CVE-2026-108852 Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to...
CVE-2026-108852
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to...
CVE-2026-108852 Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to...
CVE-2026-108852
Deep Chat version 2.5.1 is vulnerable to a cross-site scripting (XSS) flaw due to a Markdown link validation bypass . The root cause is that the RemarkableConfig.createNew function disables Remarkable link validation, allowing attackers to inject javascript: links. Attackers can execute scripts i...