CVE-2026-32626: Improper Neutralization of Input During Web Page Generation

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, AnythingLLM Desktop contains a Streaming Phase XSS vulnerability in the chat rendering pipeline that escalates to Remote Code Execution on the host OS...

CVE-2025-5895: Inefficient Regular Expression Complexity

A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the file frontend/src/metabase/lib/dom.js. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit...

MAL-2022-3231 Malicious code in frontend-src (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82e9d69203fc3786cb5e2c10c0de2d32487d039a88f4c90fce6cec3c70e92b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...