Deepseek

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-63872 Dec 02, 16:15 MEDIUM POC This Month

DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content.

XSS Deepseek

NVD

CVSS 3.1

6.1

EPSS

0.1%

CVE-2025-26210 Sep 03, 14:15 HIGH POC This Week

DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Deepseek Deepseek R1 Deepseek V2 Deepseek V3

NVD

CVSS 3.1

8.8

EPSS

0.1%

CVE-2025-63872

EPSS 0% CVSS 6.1

MEDIUM POC This Month

DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content.

XSS Deepseek

NVD

CVE-2025-26210

EPSS 0% CVSS 8.8

HIGH POC This Week

XSS Deepseek Deepseek R1 +2

NVD