Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 23:09:23 +0000 CVE-2026-108852 — Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass https://cve.radiocsirt.org/vuln/cve-2026-108852 <p><strong>Affected:</strong> OvidijusParsiunas Deep Chat</p> <p>Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.</p> <p><strong>Affected:</strong> OvidijusParsiunas Deep Chat</p> <p>Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.</p> https://cve.radiocsirt.org/vuln/cve-2026-108852