VULNERABILITY INTELLIGENCE

CVE-2024-56082

CVSS score3.5 LOW

EPSS probability0.43%

CISA KEVNot currently listed

Published2024-12-15

Last modified2026-06-17

Description

ChatBar.tsx in Lumos before 1.0.17 parses raw HTML in Markdown because the markdown-to-jsx package is used without disableParsingRawHTML set to true.