5 matches found
EUVD-2025-25594
Malicious code in bioql PyPI...
CVE-2025-50733
NextChat contains a cross-site scripting XSS vulnerability in the HTMLPreview component of artifacts.tsx that allows attackers to execute arbitrary JavaScript code when HTML content is rendered in the AI chat interface. The vulnerability occurs because user-influenced HTML from AI responses is...
CVE-2025-50733
The NextChat project contains a cross-site scripting (XSS) vulnerability within the HTMLPreview component of artifacts.tsx . The root cause is the rendering of user-influenced HTML from AI responses in an iframe with 'allow-scripts' sandbox permission without proper sanitization . Attackers can e...
PT-2025-34377 · Nextchat · Nextchat
Name of the Vulnerable Software and Affected Versions: NextChat affected versions not specified Description: NextChat contains a cross-site scripting XSS issue in the HTMLPreview component of artifacts.tsx. This allows attackers to execute arbitrary JavaScript code when HTML content is rendered i...