Lumos 安全漏洞

Lumos is a tool by Andrew Nguonly personal developer. It is used for browsing web pages. A security vulnerability exists in Lumos versions prior to 1.0.17, which stems from the use of the markdown-to-jsx package without disableParsingRawHTML set to true, where ChatBar.tsx parses raw HTML from...

CVE-2024-56082

The Lumos web browsing tool, developed by Andrew Nguonly, is vulnerable in versions prior to 1.0.17 due to an improper neutralization of input during web page generation (CWE-79 ). The ChatBar.tsx component parses raw HTML from Markdown because the markdown-to-jsx package is utilized without sett...