EUVD-2025-25594

Malicious code in bioql PyPI...

CVE-2025-50733

NextChat contains a cross-site scripting XSS vulnerability in the HTMLPreview component of artifacts.tsx that allows attackers to execute arbitrary JavaScript code when HTML content is rendered in the AI chat interface. The vulnerability occurs because user-influenced HTML from AI responses is...

PT-2025-34377

Name of the Vulnerable Software and Affected Versions: NextChat affected versions not specified Description: NextChat contains a cross-site scripting XSS issue in the HTMLPreview component of artifacts.tsx. This allows attackers to execute arbitrary JavaScript code when HTML content is rendered i...

CVE-2025-50733

The NextChat open-source project is vulnerable to a Cross-Site Scripting (XSS) flaw in the HTMLPreview component of artifacts.tsx. The root cause is the rendering of user-influenced HTML from AI responses within an iframe using the 'allow-scripts' sandbox permission without proper sanitization. A...

Exploit for CVE-2024-48217

CVE-2024-48217 Sismart Vulnerability ---------------------------...