diff --git a/package.json b/package.json
index e900516..c0147d7 100644
--- a/package.json
+++ b/package.json
@@ -3,7 +3,7 @@
   "displayName": "Corgea",
   "publisher": "Corgea",
   "description": "Corgea helps you automatically fix insecure code.",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "icon": "images/logo.png",
   "license": "UNLICENSED",
   "repository": {
diff --git a/src/providers/vulnerabilitiesWebviewProvider.ts b/src/providers/vulnerabilitiesWebviewProvider.ts
index 0a97df3..8eb2fbe 100644
--- a/src/providers/vulnerabilitiesWebviewProvider.ts
+++ b/src/providers/vulnerabilitiesWebviewProvider.ts
@@ -405,6 +405,10 @@ export default class VulnerabilitiesWebviewProvider implements vscode.WebviewVie
     });
   }
 
+  private _safeJsonStringify(value: any): string {
+    return JSON.stringify(value).replace(/</g, '\\u003c').replace(/>/g, '\\u003e');
+  }
+
   private _getReactHtmlTemplate(data: any): string {
     return `<!DOCTYPE html>
 <html>
@@ -420,33 +424,30 @@ export default class VulnerabilitiesWebviewProvider implements vscode.WebviewVie
 </head>
 <body>
   <div id="app"></div>
-  <script type="module" src="${data.bundleURI}"></script>
   <script>
-    // Acquire VS Code API once and make it available globally
     (function() {
       if (!window.vscode) {
         window.vscode = acquireVsCodeApi();
       }
     })();
-    
-    // Pass initial data to React app
     window.initialData = {
       logoURI: '${data.logoURI}',
       isLoading: ${data.isLoading},
       isAuthenticated: ${data.isAuthenticated},
       projectNotFound: ${data.projectNotFound},
-      vulnerabilities: ${JSON.stringify(data.vulnerabilities)},
-      scaVulnerabilities: ${JSON.stringify(data.scaVulnerabilities)},
-      fileGroups: ${JSON.stringify(data.fileGroups)},
-      packageGroups: ${JSON.stringify(data.packageGroups)},
+      vulnerabilities: ${this._safeJsonStringify(data.vulnerabilities)},
+      scaVulnerabilities: ${this._safeJsonStringify(data.scaVulnerabilities)},
+      fileGroups: ${this._safeJsonStringify(data.fileGroups)},
+      packageGroups: ${this._safeJsonStringify(data.packageGroups)},
       hasVulnerabilities: ${data.hasVulnerabilities},
       hasSCAVulnerabilities: ${data.hasSCAVulnerabilities},
-      scanState: ${JSON.stringify(data.scanState)},
+      scanState: ${this._safeJsonStringify(data.scanState)},
       isInScanningMode: ${data.isInScanningMode},
       autoRefreshEnabled: ${data.autoRefreshEnabled},
       ideScanningEnabled: ${data.ideScanningEnabled}
     };
   </script>
+  <script type="module" src="${data.bundleURI}"></script>
 </body>
 </html>`;
   }
diff --git a/src/views/entry/SidePanelView.tsx b/src/views/entry/SidePanelView.tsx
index 3a20ebf..fc6b24a 100644
--- a/src/views/entry/SidePanelView.tsx
+++ b/src/views/entry/SidePanelView.tsx
@@ -6,6 +6,16 @@ import VulnerabilitiesApp from '../components/VulnerabilitiesApp/Vulnerabilities
 // Global styles
 import '../styles/global.css';
 
+declare function acquireVsCodeApi(): {
+  postMessage: (message: any) => void;
+  getState: () => any;
+  setState: (state: any) => void;
+};
+
+if (typeof acquireVsCodeApi !== 'undefined' && !window.vscode) {
+  window.vscode = acquireVsCodeApi();
+}
+
 const container = document.getElementById('app');
 if (!container) {
   throw new Error('Root container not found');
