medium6.5
CVE-2025-43714
The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for example, rendering them as text inside a code block), which e…
Impact
The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for example, rendering them as text inside a code block), which enables HTML injection within most modern graphical web browsers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openai | Chatgpt | through 2025-03-30 |