Qanything Qanything
3 CVEs affecting Qanything Qanything. Latest disclosed: 2025-03-20. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7099 | Critical | 9.8 | 2024-10-13 | netease-youdao/qanything version 1.4.1 contains a vulnerability where unsafe data obtained from user input is concatenated in SQL queries, leading to SQL injec… |
CVE-2024-25722 | Critical | 9.8 | 2024-02-11 | qanything_kernel/connector/database/mysql/mysql_client.py in qanything.ai QAnything before 1.2.0 allows SQL Injection. |
CVE-2024-8026 | High | 8.1 | 2025-03-20 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the backend API of netease-youdao/qanything, as of commit d9ab8bc. The backend server has overly pe… |