Nanbingxyz vulnerabilities
We track 5 vulnerabilities in Nanbingxyz products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on January 21, 2026.
Latest Nanbingxyz vulnerabilities
- 9.6 Critical severity
5ire: Improper Control of Generation of Code
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe option parsing vulnerability in the ECharts Markdown plugin allows any user able to submit ECharts code blocks to execute a
- 9.6 Critical severity
5ire: Improper Encoding or Escaping of Output
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to execute in the renderer context. An attacker can
- 9.6 Critical severity
5ire: Improper Neutralization of Input During Web Page Generation
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. In versions 0.15.2 and prior, an RCE vulnerability exists in useMarkdown.ts, where the markdown-it-mermaid plugin is initialized with securityLevel: 'loose'.
- 9.6 Critical severity
5ire: Improper Neutralization of Input During Web Page Generation
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Version 0.13.2 contains a vulnerability in the chat page's script gadgets that enables content injection attacks through multiple vectors: malicious prompt in
- 9.6 Critical severity
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol…
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Versions prior to 0.11.1 are vulnerable to stored cross-site scripting in chatbot responses due to insufficient sanitization. This, in turn, can lead to Remot