A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized ...
Security researchers found a Google Gemini flaw that let hidden instructions in a meeting invite extract private calendar data and create deceptive events.
Vulnerabilities in Chainlit could be exploited without user interaction to exfiltrate environment variables, credentials, ...