LearningCircuit

Products

ProductCVEsExploitedLatest
local-deep-research4–May 28, 2026

Exploited and recent CVEs

  • CVE-2026-43979 Medium 5.0 Local Deep Research: HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`) 0.3%
  • CVE-2026-46526 Medium 5.0 Local Deep Research: SSRF bypass in `safe_get` 0.3%
  • CVE-2025-67743 Medium 6.3 Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service 0.3%
  • CVE-2025-57806 Medium 6.9 Local Deep Research's API keys are stored in plain text <0.1%