Netease-Youdao
7 CVEs across 2 Netease-Youdao products. Browse Netease-Youdao vulnerabilities, severities, and proof-of-concept exploits.
Netease-Youdao products with known CVEs
Netease-Youdao CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-18995 | Medium | 4.3 | 2026-08-06 | A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParse… |
CVE-2024-8027 | Medium | 6.1 | 2025-03-20 | A stored Cross-Site Scripting (XSS) vulnerability exists in netease-youdao/QAnything. Attackers can upload malicious knowledge files to the knowledge base, whi… |
CVE-2024-8026 | High | 8.1 | 2025-03-20 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the backend API of netease-youdao/qanything, as of commit d9ab8bc. The backend server has overly pe… |
CVE-2024-8024 | High | 7.5 | 2025-03-20 | A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy… |
CVE-2024-12866 | High | 7.5 | 2025-03-20 | A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0. This vulnerability allows an attacker to read arbitrary files on the fi… |
CVE-2024-12864 | High | 7.5 | 2025-03-20 | A Denial of Service (DoS) vulnerability was discovered in the file upload feature of netease-youdao/qanything version v2.0.0. The vulnerability is due to impro… |
CVE-2024-10264 | Critical | 9.8 | 2025-03-20 | HTTP Request Smuggling vulnerability in netease-youdao/qanything version 1.4.1 allows attackers to exploit inconsistencies in the interpretation of HTTP reques… |
CVE-2024-7099 | Critical | 9.8 | 2024-10-13 | netease-youdao/qanything version 1.4.1 contains a vulnerability where unsafe data obtained from user input is concatenated in SQL queries, leading to SQL injec… |