Lumos 安全漏洞

Lumos is a tool by Andrew Nguonly personal developer. It is used for browsing web pages. A security vulnerability exists in Lumos versions prior to 1.0.17, which stems from the use of the markdown-to-jsx package without disableParsingRawHTML set to true, where ChatBar.tsx parses raw HTML from...

CVE-2024-56082

The Lumos web browsing tool is vulnerable in versions prior to 1.0.17 due to an issue in the ChatBar.tsx component. The vulnerability occurs because the markdown-to-jsx package is utilized without setting disableParsingRawHTML to true , allowing the application to parse raw HTML from Markdown. To...