EUVD-2025-28123

Malicious code in bioql PyPI...

CVE-2024-57783

CVE-2024-57783 affects the Dot desktop app up to version 0.9.3. The vulnerability enables XSS and potential command execution because user input and LLM output are appended to the DOM via innerHTML in render.js, and the Electron window can access Node.js APIs. Affected: Dot 0.9.3 and earlier. Imp...

PT-2025-21176 · Electron +1 · Electron +1

Name of the Vulnerable Software and Affected Versions: 5ire versions prior to 0.11.1 Description: The issue is related to stored cross-site scripting in chatbot responses due to insufficient sanitization, which can lead to Remote Code Execution RCE via unsafe Electron protocol handling and expose...