medium6.1
CVE-2025-63872
DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content.
Impact
DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deepseek | Deepseek | Version 3.2 |