TI-2026-70742 CVE-2026-108852 · GHSA-qvgf-g4p8-x92pCross-site scripting in Deep Chat via Markdown linksPriority LOW 10Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation.CVSS 4.0LOW 2.1· Network · No auth · User interaction · EPSS 0.00185 · Published 2026-10-11 · No fix listed CWE-79