Alexpinel vulnerabilities
We track 1 vulnerability in Alexpinel products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2025.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Alexpinel vulnerabilities
- 8.1 High severity
Dot: Improper Neutralization of Input During Web Page Generation
The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to the DOM with innerHTML (in render.js), and because the Electron window can access Node.js APIs.