ChatBar.tsx in Lumos before 1.0.17 parses raw HTML in Markdown because the markdown-to-jsx package is used without disableParsingRawHTML set to true.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

• advisory github.com
• advisory nvd.nist.gov
• report github.com
• web github.com
• web github.com