← Back

Deepseek

deepseek

2 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Deepseek R1
deepseek-r1
1 CVE
Deepseek V2
deepseek-v2
1 CVE
Deepseek V3
deepseek-v3
1 CVE
Deepseek
deepseek
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-63872
1Deepseek
1Deepseek
Jun 17, 2026
Dec 2, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content.
CVE-2025-26210
1Deepseek
3Deepseek R1
Deepseek V2Deepseek V3
Jun 17, 2026
Sep 3, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain. NOTE: some third parties have indicated that this is intended behavior.