Skip to content
OpenAdvisories

Vendor

AI-QL

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.9

    TUUI vulnerable to Remote Code Execution (RCE) via XSS in Markdown ECharts Rendering

    TUUI is a desktop MCP client designed as a tool unitary utility integration. Prior to 1.3.4, a critical Remote Code Execution (RCE) vulnerability exists in Tuui due to an unsafe Cross-Site Scripting (XSS) flaw in the Markdown rendering component. Tuui allows …