Joey-zhou vulnerabilities

Products

• Xiaozhi-esp32-server-java 3

Newest

• joey-zhou xiaozhi-esp32-server-java Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance CVE-2026-111623 6.3 MediumOctober 16, 2026
• joey-zhou xiaozhi-esp32-server-java joey-zhou xiaozhi-esp32-server-java Cookie AuthenticationInterceptor.java tryAuthenticateWithCookies improper authentication CVE-2025-15135 5.3 MediumDecember 28, 2025
• joey-zhou xiaozhi-esp32-server-java joey-zhou xiaozhi-esp32-server-java update sql injection CVE-2025-3382 5.3 MediumApril 7, 2025