NPM: Electron: ProtocolResponse.url reuses the default session cache instead of the registering session

NPM: Electron: ProtocolResponse.url reuses the default session cache instead of the registering session vulnerability discovered by ? in WordPress Npm electron versions = 40.0.0-alpha.1, 40.10.6...

NPM: Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads

NPM: Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads vulnerability discovered by ? in WordPress Npm electron versions 39.8.10...

EUVD-2025-28123

Malicious code in bioql PyPI...

CVE-2025-47777

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Versions prior to 0.11.1 are vulnerable to stored cross-site scripting in chatbot responses due to insufficient sanitization. This, in turn, can lead to Remote Code Execution RCE via unsafe...

CVE-2025-47777

5ire client (cross‑platform desktop AI assistant) versions prior to 0.11.1 are vulnerable to stored XSS in chatbot responses due to insufficient sanitization, which can lead to Remote Code Execution via unsafe Electron protocol handling and exposed Electron APIs. Patch available in 0.11.1; all us...

CVE-2025-47777 5ire Client Vulnerable to Cross-Site Scripting (XSS) and Remote Code Execution (RCE)

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Versions prior to 0.11.1 are vulnerable to stored cross-site scripting in chatbot responses due to insufficient sanitization. This, in turn, can lead to Remote Code Execution RCE via unsafe...

5ire 输入验证错误漏洞

5ire is a cross-platform desktop AI assistant from the individual developers at Ironben. An input validation error vulnerability exists in versions prior to 5ire 0.11.1, which stems from insufficient cleanup leading to stored cross-site scripting that could lead to remote code execution via...