Description
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives. Attackers can inject malicious scripts through markdown sources or chat messages that execute in the Electron renderer process with access to Node.js APIs and the filesystem.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
xpf0000 FlyEnv
Default version status: unaffected
0 to < 4.18.0affected4.18.0unaffected
pkg:github/xpf0000/FlyEnvReferences
- https://github.com/xpf0000/FlyEnv/issues/809 ↗
- https://github.com/xpf0000/FlyEnv/releases/tag/v4.18.0 ↗
- https://github.com/xpf0000/FlyEnv/pull/810 ↗
- https://github.com/xpf0000/FlyEnv/commit/68fd6d7b200273ad0a8bce09424b8bd87134cfb6 ↗
- https://www.vulncheck.com/advisories/flyenv-cross-site-scripting-via-v-html ↗