https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 09:02:24 +0000 https://vulnerability.circl.lu/vuln/cve-2026-39107 <p>A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface&#39;s &#39;Preview&#39; feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI model. When a user switches to the &#39;Preview&#39; tab to view AI-generated code, the malicious payload is rendered directly into the DOM, leading to arbitrary JavaScript execution in the victim&#39;s browser session.</p> <p>A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface&#39;s &#39;Preview&#39; feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI model. When a user switches to the &#39;Preview&#39; tab to view AI-generated code, the malicious payload is rendered directly into the DOM, leading to arbitrary JavaScript execution in the victim&#39;s browser session.</p> https://vulnerability.circl.lu/vuln/cve-2026-39107