Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

ThinkInAIXYZ

ThinkInAIXYZ deepchat vulnerabilities

7 published CVEs name ThinkInAIXYZ deepchat among the affected products.

Newest CVEs

  • CVE-2026-43899

    DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl`

    ThinkInAIXYZ · deepchat

    Critical9.6
  • CVE-2026-43900

    DeepChat: Persistent DOM XSS via HTML Entity Encoding in `<antArtifact>` SVG Rendering (Bypass of `svgSanitizer.ts`)

    ThinkInAIXYZ · deepchat

    Critical9.3
  • CVE-2025-67744

    Mermaid XSS vulnerability leads to Remote Code Execution

    ThinkInAIXYZ · deepchat

    Critical9.7
  • CVE-2025-66481

    DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content

    ThinkInAIXYZ · deepchat

    Critical9.7
  • CVE-2025-66222

    DeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)

    ThinkInAIXYZ · deepchat

    Critical9.7
  • CVE-2025-58768

    DeepChat's Mermaid rendering has XSS leading to RCE

    ThinkInAIXYZ · deepchat

    Critical9.7
  • CVE-2025-55733

    DeepChat One-click Remote Code Execution through Custom URL Handling

    ThinkInAIXYZ · deepchat

    Critical9.7