apconw Schwachstellen (CVE)

Für apconw veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
5.4Mittel
CVE-2026-82881

Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown

apconw Aix-DB

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descripti…

5.3Mittel
CVE-2026-4530

apconw Aix-DB terminology_retriever.py sql injection

apconw Aix-DB

A security flaw has been discovered in apconw Aix-DB up to 1.2.3. This impacts an unknown function of the file agent/text2sql/rag/terminology_retriever.py. Performing a manipulation of the argument Description results in sql injection. The attack requires a l…