Vulnerabilidades de apconw (CVE)

Registros CVE publicados para apconw, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
5.4Media
CVE-2026-82881

Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown

apconw Aix-DB

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descripti…

5.3Media
CVE-2026-4530

apconw Aix-DB terminology_retriever.py sql injection

apconw Aix-DB

A security flaw has been discovered in apconw Aix-DB up to 1.2.3. This impacts an unknown function of the file agent/text2sql/rag/terminology_retriever.py. Performing a manipulation of the argument Description results in sql injection. The attack requires a l…