Vulnerabilities

TI-2026-32023 CVE-2026-43979 · GHSA-fj2m-qvh9-jq4q

Local Deep Research: HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)

MEDIUM 56

Local Deep Research is an AI-powered research assistant for deep, iterative research.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00331 Published 2026-05-28 Fixed in 1.6.0 CWE-79

TI-2026-34213 CVE-2026-46526 · GHSA-g23j-2vwm-5c25

MEDIUM 56

Local Deep Research is an AI-powered research assistant for deep, iterative research.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00304 Published 2026-05-28 Fixed in 1.6.10 CWE-918

TI-2025-41439 CVE-2025-67743 · GHSA-9c54-gxh7-ppjc

MEDIUM 62

Local Deep Research is an AI-powered research assistant for deep, iterative research.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00318 Published 2025-12-23 Fixed in 1.3.9 CWE-918

TI-2025-35689 CVE-2025-57806

LOW 29

Local Deep Research is an AI-powered research assistant for deep, iterative research.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00073 Published 2025-09-03 Fixed in 1.0.0 CWE-312