Vulnerabilities in ThinkInAIXYZ

7 results

CVE-2025-55733CRITICALDeepChat One-click Remote Code Execution through Custom URL HandlingEPSS 0.6%CVE-2025-58768CRITICALDeepChat's Mermaid rendering has XSS leading to RCEEPSS 0.6%CVE-2025-67744CRITICALMermaid XSS vulnerability leads to Remote Code ExecutionEPSS 0.5%CVE-2025-66222CRITICALDeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)EPSS 0.5%CVE-2025-66481CRITICALDeepChat's Incomplete XSS Fix Allows RCE through Mermaid ContentEPSS 0.5%CVE-2026-43899CRITICALDeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl`EPSS 0.3%CVE-2026-43900CRITICALDeepChat: Persistent DOM XSS via HTML Entity Encoding in `<antArtifact>` SVG Rendering (Bypass of `svgSanitizer.ts`)EPSS 0.3%