OvidijusParsiunas CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW OvidijusParsiunas CVE published 2026-10-11

CVE-2026-108852

Deep Chat versions up to 2.5.1 contain a cross-site scripting vulnerability due to a Markdown link validation bypass. This allows attackers to inject JavaScript links, potentially leading to script execution when victims click on crafted links in AI responses, chat messages, or loaded history. The vulnerability is caused by RemarkableConfig.createNew disabling Remarkable link validation, allowing for craf [truncated]