Dot vulnerabilities

1 known vulnerability in Dot from Alexpinel. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Dot: Improper Neutralization of Input During Web Page Generation

  CVE-2024-57783Jun 2, 2025Alexpinel

  The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to the DOM with innerHTML (in render.js), and because the Electron window can access Node.js APIs.