00:00
2026-07-26
research.jfrog.com
ai-safety
NoteGen is vulnerable to Chat Preview XSS via Unsanitized AI/Skill HTML Rendering
NoteGen before version 0.32.0 is vulnerable to a stored cross-site scripting (XSS) attack via unsanitized HTML rendering of AI chat responses, allowing arbitrary JavaScript execution in the Tauri webv…