Thinkinaixyz Deepchat vulnerabilities
- thinkinaixyz deepchat DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl` 9.6 Critical
- thinkinaixyz deepchat DeepChat: Persistent DOM XSS via HTML Entity Encoding in `<antArtifact>` SVG Rendering (Bypass of `svgSanitizer.ts`) 9.3 Critical
- thinkinai deepchat Mermaid XSS vulnerability leads to Remote Code Execution 9.7 Critical
- thinkinai deepchat DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content 9.7 Critical
- thinkinai deepchat DeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE) 9.7 Critical
- thinkinai deepchat DeepChat's Mermaid rendering has XSS leading to RCE 9.7 Critical
- thinkinai deepchat DeepChat One-click Remote Code Execution through Custom URL Handling 9.7 Critical