CVE-2024-57783

The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to the DOM with innerHTML in render.js, and because the Electron window can access Node.js APIs...

CVE-2024-57783

CVE-2024-57783 affects the Dot desktop app up to version 0.9.3. The vulnerability enables XSS and potential command execution because user input and LLM output are appended to the DOM via innerHTML in render.js, and the Electron window can access Node.js APIs. Affected: Dot 0.9.3 and earlier. Imp...

CVE-2024-57783

The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to the DOM with innerHTML in render.js, and because the Electron window can access Node.js APIs...

CVE-2024-57783

The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to the DOM with innerHTML in render.js, and because the Electron window can access Node.js APIs...