FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives. Attackers can inject malicious scripts through markdown sources or chat messag…
Medium CVSS 6.1
Summary
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives. Attackers can inject malicious scripts through markdown sources or chat messages that execute in the Electron renderer process with access to Node.js APIs and the filesystem.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/xpf0000/FlyEnv/commit/68fd6d7b200273ad0a8bce09424b8bd87134cfb6
- https://github.com/xpf0000/FlyEnv/issues/809
- https://github.com/xpf0000/FlyEnv/pull/810
- https://github.com/xpf0000/FlyEnv/releases/tag/v4.18.0
- https://www.vulncheck.com/advisories/flyenv-cross-site-scripting-via-v-html
Timeline
- nvd_ingest NVD