XSS in Codexu Notegen
CVE-2026-17496
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (24.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N.
Affected products
- Codexu Notegen — versions 0
- Notegen
Weakness classification (CWE)
References
- reefs@jfrog.com (Patch, patch)
- reefs@jfrog.com (Product, vendor-advisory, Release Notes)
- reefs@jfrog.com (Product, product)
Frequently asked questions
- What is CVE-2026-17496?
- CVE-2026-17496 is a high-severity vulnerability in Codexu Notegen, classified under Cross-site Scripting. CVSS score: 8.1/10. Published 2026-07-26.
- How severe is CVE-2026-17496?
- High severity. CVSS v3 base score is 8.1 out of 10.