CVE-2025-56526

Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF.

More information : https://github.com/Cinnamon/kotaemon