[GH-ISSUE #920] [BUG]XSS(?) #551

Closed
opened 2026-10-26 21:23:06 +00:00 by bsakaguchi · 2 comments
Owner

Originally created by @csshark on GitHub (Jun 26, 2025).
Original GitHub issue: https://github.com/deepseek-ai/DeepSeek-V3/issues/920

Describe the bug
When DeepSeek answers in his typical formating (text type) some of the results he is giving are interpreted in API. Which means agent gives the payload and it immediately affects you.

To Reproduce
Ask agent to bring you list of any payloads in HTML with < meta > and redirect.

Expected behavior
406 code and redirect user to different site

Originally created by @csshark on GitHub (Jun 26, 2025). Original GitHub issue: https://github.com/deepseek-ai/DeepSeek-V3/issues/920 **Describe the bug** When DeepSeek answers in his typical formating (text type) some of the results he is giving are interpreted in API. Which means agent gives the payload and it immediately affects you. **To Reproduce** Ask agent to bring you list of any payloads in HTML with < meta > and redirect. **Expected behavior** 406 code and redirect user to different site
bsakaguchi 2026-10-26 21:23:06 +00:00
Author
Owner

@github-actions[bot] commented on GitHub (Aug 17, 2025):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. If you believe this issue is still relevant, please leave a comment to keep it open. Thank you for your contributions!

<!-- gh-comment-id:3193996069 --> @github-actions[bot] commented on GitHub (Aug 17, 2025): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. If you believe this issue is still relevant, please leave a comment to keep it open. Thank you for your contributions!
Author
Owner

@github-actions[bot] commented on GitHub (Sep 1, 2025):

false

<!-- gh-comment-id:3240535691 --> @github-actions[bot] commented on GitHub (Sep 1, 2025): false
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
deepseek-ai/DeepSeek-V3#551
No description provided.