CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-58768

DeepChat is a smart assistant uses artificial intelligence. Prior to version 0.3.5, in the Mermaid chart rendering component, there is a risky operation of directly using `innerHTML` to set user content. Therefore, any malicious content rendered via Mermaid will directly trigger the exploit chain, leading to command execution. This vulnerability is primarily caused by a failure to fully address the existing XSS issue in the project, leading to another exploit chain. The exploit chain is consistent with the report GHSA-hqr4-4gfc-5p2j, executing arbitrary JavaScript code via XSS and arbitrary commands via exposed IPC. Version 0.3.5 contains an updated fix.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.6%

CVSS Severity

CVSS v3 Score 9.6

References

https://github.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-f7q5-vc93-wp6j

Products affected by CVE-2025-58768

Thinkinai » Deepchat » Version: 0.0.1

cpe:2.3:a:thinkinai:deepchat:0.0.1
Thinkinai » Deepchat » Version: 0.0.10

cpe:2.3:a:thinkinai:deepchat:0.0.10
Thinkinai » Deepchat » Version: 0.0.11

cpe:2.3:a:thinkinai:deepchat:0.0.11
Thinkinai » Deepchat » Version: 0.0.12

cpe:2.3:a:thinkinai:deepchat:0.0.12
Thinkinai » Deepchat » Version: 0.0.13

cpe:2.3:a:thinkinai:deepchat:0.0.13
Thinkinai » Deepchat » Version: 0.0.14

cpe:2.3:a:thinkinai:deepchat:0.0.14
Thinkinai » Deepchat » Version: 0.0.15

cpe:2.3:a:thinkinai:deepchat:0.0.15
Thinkinai » Deepchat » Version: 0.0.16

cpe:2.3:a:thinkinai:deepchat:0.0.16
Thinkinai » Deepchat » Version: 0.0.2

cpe:2.3:a:thinkinai:deepchat:0.0.2
Thinkinai » Deepchat » Version: 0.0.3

cpe:2.3:a:thinkinai:deepchat:0.0.3
Thinkinai » Deepchat » Version: 0.0.5

cpe:2.3:a:thinkinai:deepchat:0.0.5
Thinkinai » Deepchat » Version: 0.0.6

cpe:2.3:a:thinkinai:deepchat:0.0.6
Thinkinai » Deepchat » Version: 0.0.7

cpe:2.3:a:thinkinai:deepchat:0.0.7
Thinkinai » Deepchat » Version: 0.0.8

cpe:2.3:a:thinkinai:deepchat:0.0.8
Thinkinai » Deepchat » Version: 0.0.8-1

cpe:2.3:a:thinkinai:deepchat:0.0.8-1
Thinkinai » Deepchat » Version: 0.0.9

cpe:2.3:a:thinkinai:deepchat:0.0.9
Thinkinai » Deepchat » Version: 0.1.0

cpe:2.3:a:thinkinai:deepchat:0.1.0
Thinkinai » Deepchat » Version: 0.1.1

cpe:2.3:a:thinkinai:deepchat:0.1.1
Thinkinai » Deepchat » Version: 0.2.0

cpe:2.3:a:thinkinai:deepchat:0.2.0
Thinkinai » Deepchat » Version: 0.2.0-1

cpe:2.3:a:thinkinai:deepchat:0.2.0-1
Thinkinai » Deepchat » Version: 0.2.1

cpe:2.3:a:thinkinai:deepchat:0.2.1
Thinkinai » Deepchat » Version: 0.2.2

cpe:2.3:a:thinkinai:deepchat:0.2.2
Thinkinai » Deepchat » Version: 0.2.3

cpe:2.3:a:thinkinai:deepchat:0.2.3
Thinkinai » Deepchat » Version: 0.2.3-1

cpe:2.3:a:thinkinai:deepchat:0.2.3-1
Thinkinai » Deepchat » Version: 0.2.4

cpe:2.3:a:thinkinai:deepchat:0.2.4
Thinkinai » Deepchat » Version: 0.2.5

cpe:2.3:a:thinkinai:deepchat:0.2.5
Thinkinai » Deepchat » Version: 0.2.6

cpe:2.3:a:thinkinai:deepchat:0.2.6
Thinkinai » Deepchat » Version: 0.2.7

cpe:2.3:a:thinkinai:deepchat:0.2.7
Thinkinai » Deepchat » Version: 0.2.8

cpe:2.3:a:thinkinai:deepchat:0.2.8
Thinkinai » Deepchat » Version: 0.2.9

cpe:2.3:a:thinkinai:deepchat:0.2.9
Thinkinai » Deepchat » Version: 0.3.0

cpe:2.3:a:thinkinai:deepchat:0.3.0
Thinkinai » Deepchat » Version: 0.3.1

cpe:2.3:a:thinkinai:deepchat:0.3.1
Thinkinai » Deepchat » Version: 0.3.2

cpe:2.3:a:thinkinai:deepchat:0.3.2
Thinkinai » Deepchat » Version: 0.3.3

cpe:2.3:a:thinkinai:deepchat:0.3.3
Thinkinai » Deepchat » Version: 0.3.4

cpe:2.3:a:thinkinai:deepchat:0.3.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-58768

Products

Pricing

Contact Us