← All advisories

Low severity3.5NVD Advisory· Published Dec 15, 2024· Updated Jun 17, 2026

CVE-2024-56082

CVE-2024-56082

Description

ChatBar.tsx in Lumos before 1.0.17 parses raw HTML in Markdown because the markdown-to-jsx package is used without disableParsingRawHTML set to true.

Affected products

2

Lumos/Lumosllm-create
Range: <1.0.17
Quantizor/Markdown To Jsxreferences

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.