CVE-2026-28509 in LangBot
الملخص
بحسب MITRE • 06/03/2026
LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scripting (XSS) vulnerability. This issue has been patched in version 4.8.7.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.