Zerotrail-Ai

**Name of the Vulnerable Software and Affected Versions** AnythingLLM versions prior to 1.12.1 **Description** The in-chat markdown renderer contains an unsafe custom rule for images that interpolates the markdown image `alt` text into an HTML `alt` attribute without HTML encoding. While most call-sites use `DOMPurify.sanitize()` for defense-in-depth, the `Chartable` component renders chart captions without sanitization. An attacker capable of influencing the LLM output—such as through indirect prompt injection in a shared workspace document or by creating a chart record in a multi-user workspace—can trigger stored DOM-level Cross-Site Scripting (XSS), which is a vulnerability allowing the execution of malicious scripts in a user's browser. The chat history is loaded via the 'GET /api/workspace/:slug/chats' endpoint and rendered in the UI. **Recommendations** Update to version 1.12.1.

**Name of the Vulnerable Software and Affected Versions** changedetection.io versions prior to 0.54.7 **Description** The `jq:` and `jqraw:` include filter expressions in changedetection.io allow the use of the jq `env` builtin, which reads all process environment variables and stores them as the watch snapshot. An authenticated user, or an unauthenticated user when no password is set, can leak sensitive environment variables including `SALTED PASS`, `PLAYWRIGHT DRIVER URL`, `HTTP PROXY`, and any secrets passed as environment variables to the container. The vulnerability resides in the `html tools.py` file, specifically lines 380-388, where user-supplied jq filter expressions are compiled and executed without restricting dangerous jq builtins. The form validator only checks that the expression compiles, failing to block dangerous functions like `env`. This allows an attacker to create a watch for any JSON endpoint using `jqraw:env` as the include filter, which then exposes all environment variables in the processed text file. This can lead to secret exposure, infrastructure credential theft, and potential cascading access to other internal systems. **Recommendations** Update to changedetection.io version 0.54.7 or later.