CVE-2026-43979
2 advisories.
PyPI/local-deep-research CVE-2026-43979: medium 5, EPSS 0.36%
local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)
Action: Upgrade local-deep-research to 1.6.0 or later.
pip install local-deep-research==1.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.0 | - |
Fixed versions
| 1.6.0 |
Sources
- osv: GHSA-fj2m-qvh9-jq4q
- https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-fj2m-qvh9-jq4q
- https://nvd.nist.gov/vuln/detail/CVE-2026-43979
- https://github.com/LearningCircuit/local-deep-research/pull/3082
- https://github.com/LearningCircuit/local-deep-research/pull/3613
- https://github.com/LearningCircuit/local-deep-research/commit/0148fa265a3da460c07def7441f9ac49ea61fbcb
- https://github.com/LearningCircuit/local-deep-research/commit/15f13d5c79847f1c38c2dc67bd0027c38af9e34b
- https://github.com/LearningCircuit/local-deep-research
CVE-2026-43979 · published · modified · JSON
PyPI/local-deep-research CVE-2026-43979: medium 5, EPSS 0.36%
local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)
Action: Upgrade local-deep-research to 1.6.0 or later.
pip install local-deep-research==1.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.0 | - |
Fixed versions
| 1.6.0 |
Sources
- osv: PYSEC-2026-2610
- https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-fj2m-qvh9-jq4q
- https://nvd.nist.gov/vuln/detail/CVE-2026-43979
- https://github.com/LearningCircuit/local-deep-research/pull/3082
- https://github.com/LearningCircuit/local-deep-research/pull/3613
- https://github.com/LearningCircuit/local-deep-research/commit/0148fa265a3da460c07def7441f9ac49ea61fbcb
- https://github.com/LearningCircuit/local-deep-research/commit/15f13d5c79847f1c38c2dc67bd0027c38af9e34b
- https://github.com/LearningCircuit/local-deep-research
- https://pypi.org/project/local-deep-research
- https://github.com/advisories/GHSA-fj2m-qvh9-jq4q
CVE-2026-43979 · published · modified · JSON