Skip to content
OpenAdvisories

Vendor

apconw

3 known vulnerabilities.

Products

Aix-DB 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-82881

    Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown

    Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descripti…

    apconw Aix-DB
  • Medium 5.3
    CVE-2026-4530

    apconw Aix-DB terminology_retriever.py sql injection

    A security flaw has been discovered in apconw Aix-DB up to 1.2.3. This impacts an unknown function of the file agent/text2sql/rag/terminology_retriever.py. Performing a manipulation of the argument Description results in sql injection. The attack requires a l…

    apconw Aix-DB