CVE-2026-43900

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, a Cross-Site Scripting (XSS) vulnerability exists due to a discrepancy between the backend validation layer and the frontend browser rendering engine. The SVGSanitizer (src/main/lib/svgSanitizer.ts) restricts script execution by scrubbing javascript: protocols using plain-text regular expressions. However, it fails to account for HTML entity decoding prior to Vue's v-html DOM insertion inside the SvgArtifact.vue component. By feeding an SVG artifact with obfuscated entities (e.g., javascript:alert(1)), an attacker can completely bypass the sanitizer, culminating in arbitrary JavaScript execution when a victim interacts with the rendered SVG Element. This vulnerability is fixed in v1.0.4-beta.1.

• CWE-79

• https://github.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-7r59-67v3-3mgp
• https://github.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-7r59-67v3-3mgp

Published

May 11, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-43895jq is a command-line JSON processor. In 1.8.1 and earlier, j…4.4
• CVE-2026-43896jq is a command-line JSON processor. In 1.8.1 and earlier, u…5.5
• CVE-2026-43897Link Preview JS extracts web links information. Prior to 4.0…8.7
• CVE-2026-43898SandboxJS is a JavaScript sandboxing library. Prior to 0.9.6…10
• CVE-2026-43899DeepChat is an open-source artificial intelligence agent pla…9.6
• CVE-2026-4390A weakness has been identified in TeamSpeak 3 Server up to 3…5.4
• CVE-2026-43901Wireshark MCP is an MCP Server that turns tshark into a stru…6.8
• CVE-2026-43903OpenImageIO is a toolset for reading, writing, and manipulat…7.8
• CVE-2026-43904OpenImageIO is a toolset for reading, writing, and manipulat…7.8
• CVE-2026-43905OpenImageIO is a toolset for reading, writing, and manipulat…7.8
• CVE-2026-43906OpenImageIO is a toolset for reading, writing, and manipulat…7.8
• CVE-2026-43907OpenImageIO is a toolset for reading, writing, and manipulat…8.3