What’s Vulnerable › Products

ThinkInAIXYZ deepchat vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your ThinkInAIXYZ deepchat version is affected

Latest ThinkInAIXYZ deepchat vulnerabilities

• CVE-2026-43900 — DeepChat: Persistent DOM XSS via HTML Entity Encoding in `<antArtifact>` SVG Rendering (Bypass of `svgSanitizer.ts`) (CVSS 9.3)
• CVE-2026-43899 — DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl` (CVSS 9.6)
• CVE-2025-67744 — Mermaid XSS vulnerability leads to Remote Code Execution (CVSS 9.6)
• CVE-2025-66481 — DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content (CVSS 9.6)
• CVE-2025-66222 — DeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE) (CVSS 9.6)
• CVE-2025-58768 — DeepChat's Mermaid rendering has XSS leading to RCE (CVSS 9.6)
• CVE-2025-55733 — DeepChat One-click Remote Code Execution through Custom URL Handling (CVSS 9.6)