CVE-2026-17496

Name of the Vulnerable Software and Affected Versions NoteGen versions prior to 0.32.0

Description Cross-site scripting occurs when AI chat responses are rendered using markdown-it with the html:true configuration and injected into the DOM via dangerouslySetInnerHTML in the chat-preview component. The application lacks HTML sanitization and has the Content Security Policy (CSP) set to null. An attacker can provide malicious content to the model prompt, such as a crafted REFERENCE.md file, to force the model to generate executable markup, including an img onerror handler. This allows arbitrary JavaScript execution within the privileged Tauri webview application context.

Recommendations Update NoteGen to version 0.32.0 or later.