TThinkInAIXYZ

Products

Exploited and recent CVEs

• CVE-2026-43899 Critical 9.6 DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl` 0.4%
• CVE-2026-43900 Critical 9.3 DeepChat: Persistent DOM XSS via HTML Entity Encoding in `<antArtifact>` SVG Rendering (Bypass of `svgSanitizer.ts`) 0.4%
• CVE-2025-67744 Critical 9.7 Mermaid XSS vulnerability leads to Remote Code Execution 0.6%
• CVE-2025-66481 Critical 9.7 DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content 0.6%
• CVE-2025-66222 Critical 9.7 DeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE) 0.7%
• CVE-2025-58768 Critical 9.7 DeepChat's Mermaid rendering has XSS leading to RCE 0.6%
• CVE-2025-55733 Critical 9.7 DeepChat One-click Remote Code Execution through Custom URL Handling 0.7%