Vulnerabilities in netease-youdao

12 results

CVE-2024-12866HIGHLocal File Inclusion in netease-youdao/qanythingEPSS 1.5%CVE-2024-10264HIGHHTTP Request Smuggling in netease-youdao/qanythingEPSS 1.0%CVE-2024-12864HIGHUnauthenticated DoS by Sending Large Filename at File Upload Endpoint in netease-youdao/qanythingEPSS 0.9%CVE-2026-85671HIGHQAnything 2.0.0 Unauthenticated Cross-User File DisclosureEPSS 0.6%CVE-2024-7099CRITICALSQL Injection in netease-youdao/qanythingEPSS 0.6%CVE-2026-90818MEDIUMnetease-youdao LobsterAI Browser Network Configuration openclawConfigSync.ts OpenClawConfigSync.buildBrowserConfig server-side request forgeryEPSS 0.5%CVE-2026-18995MEDIUMnetease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosureEPSS 0.5%CVE-2024-8027MEDIUMStored Cross-Site Scripting (XSS) in netease-youdao/QAnythingEPSS 0.4%CVE-2024-8024HIGHCORS Misconfiguration in netease-youdao/qanythingEPSS 0.3%CVE-2024-8026HIGHCSRF due to overly permissive CORS headers in netease-youdao/qanythingEPSS 0.2%CVE-2026-108156MEDIUMLobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.jsonEPSS 0.2%CVE-2026-112014MEDIUMLobsterAI before 2026.10.16 Hardcoded Password in Provider API Key ExportEPSS 0.1%