https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 16:15:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-385822 EUVD-2026-385822 https://cve.radiocsirt.org/vuln/euvd-2026-385822 https://cve.radiocsirt.org/vuln/fkie_cve-2026-108852 <p>Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.</p> <p>Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-108852 https://cve.radiocsirt.org/vuln/ghsa-qvgf-g4p8-x92p <p>Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.</p> <p>Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.</p> https://cve.radiocsirt.org/vuln/ghsa-qvgf-g4p8-x92p