---
id: CVE-2026-108852
title: >-
  Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that
  allows attackers to inject javascript: links because
  RemarkableConfig.createNew disables Remarkable link validation
summary: >-
  Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that
  allows attackers to inject javascript: links because
  RemarkableConfig.createNew disables Remarkable link validation. Attackers can
  place crafted Markdown links in…
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N'
cwe:
  - CWE-79
published: '2026-10-11'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T14:17:04.827'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-108852'
references:
  - url: 'https://github.com/OvidijusParsiunas/deep-chat'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/OvidijusParsiunas/deep-chat/blob/2.5.1/component/src/views/chat/messages/remarkable/remarkableConfig.ts#L74-L78
    label: disclosure@vulncheck.com
  - url: >-
      https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ovidijusparsiunas-deep-chat-markdown-scheme-validation
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/deep-chat-through-2.5.1-xss-via-markdown-link-validation-bypass
    label: disclosure@vulncheck.com
tags:
  - nvd
ingestedAt: '2026-10-12T14:50:34.051Z'
---

## Overview

Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.