EUVD-2025-22327

Malicious code in bioql PyPI...

CVE-2025-51859

Stored Cross-Site Scripting XSS vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model LLM to embed malicious script payloads...

CVE-2025-51859

Chaindesk, a web application for constructing AI Agents, is vulnerable to Stored Cross-Site Scripting (XSS) in its agent chat component in versions through 2025-05-26 . An attacker can craft an AI agent with a malicious system prompt that instructs the underlying Large Language Model (LLM) to emb...