CVE-2025-0183: Binary-Husky Gpt Academic

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability allows an attacker to inject malicious scripts into the `debug_log.html` file generated by the module. When an admin visits this debug report, the injected scripts can execute, potentially leading to unauthorized actions and data access.

Affected products

• Binary-Husky Gpt Academic: version 3.90 only

Published 2025-03-20. Last modified 2026-06-17.