Skip to content
OpenAdvisories

Vendor

moeru-ai

1 known vulnerabilities.

Products

airi 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.7
    CVE-2025-59053

    AIRI's character card/chat UI is vulnerable to XSS and can lead to RCE

    AIRI is a self-hosted, artificial intelligence based Grok Companion. In v0.7.2-beta.2 in the `packages/stage-ui/src/components/MarkdownRenderer.vue` path, the Markdown content is processed using the useMarkdown composable, and the processed HTML is rendered d…

    moeru-ai airi