Description
DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain. NOTE: some third parties have indicated that this is intended behavior.
High · 8.8
CVE-2025-26210
EUVD-2025-26507GHSA-v669-8m26-4r4w
DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain. NO…
Published Sep 3, 2025 · Updated Sep 8, 2025 · Assigned by mitre