<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: thinkinaixyz-deepchat</title><description>Every new CVE for thinkinaixyz-deepchat.</description><link>https://agentprime.io/</link><item><title>CVE-2026-43899: DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl`</title><link>https://agentprime.io/advisories/CVE-2026-43899/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43899/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 21:42:54 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-43900: DeepChat: Persistent DOM XSS via HTML Entity Encoding in `&lt;antArtifact&gt;` SVG Rendering (Bypass of `svgSanitizer.ts`)</title><link>https://agentprime.io/advisories/CVE-2026-43900/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43900/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 21:42:19 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-67744: Mermaid XSS vulnerability leads to Remote Code Execution</title><link>https://agentprime.io/advisories/CVE-2025-67744/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-67744/</guid><description>CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Dec 2025 00:42:21 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-66481: DeepChat&apos;s Incomplete XSS Fix Allows RCE through Mermaid Content</title><link>https://agentprime.io/advisories/CVE-2025-66481/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-66481/</guid><description>CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Dec 2025 00:25:08 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-66222: DeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)</title><link>https://agentprime.io/advisories/CVE-2025-66222/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-66222/</guid><description>CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Dec 2025 18:34:44 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-58768: DeepChat&apos;s Mermaid rendering has XSS leading to RCE</title><link>https://agentprime.io/advisories/CVE-2025-58768/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-58768/</guid><description>CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Sep 2025 20:19:52 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-55733: DeepChat One-click Remote Code Execution through Custom URL Handling</title><link>https://agentprime.io/advisories/CVE-2025-55733/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55733/</guid><description>CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Aug 2025 18:26:38 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>