Skip to content
Netease-youdao vulnerabilities
Newest
-
netease-youdao lobsterai
LobsterAI before 2026.10.16 Hardcoded Password in Provider API Key Export
CVE-2026-112014
6.8 Medium
-
netease-youdao lobsterai
LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.json
CVE-2026-108156
6.9 Medium
-
netease-youdao lobsterai
netease-youdao LobsterAI Browser Network Configuration openclawConfigSync.ts OpenClawConfigSync.buildBrowserConfig server-side request forgery
CVE-2026-90818
5.3 Medium
-
netease-youdao qanything
QAnything 2.0.0 Unauthenticated Cross-User File Disclosure
CVE-2026-85671
8.7 High
-
netease-youdao lobsterai
netease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosure
CVE-2026-18995
5.3 Medium
-
netease-youdao netease-youdao/qanything, youdao qanything +1 more
Local File Inclusion in netease-youdao/qanything
CVE-2024-12866
7.5 High
-
netease-youdao netease-youdao/qanything, qanything +1 more
CSRF due to overly permissive CORS headers in netease-youdao/qanything
CVE-2024-8026
8.1 High
-
netease-youdao netease-youdao/qanything, youdao qanything +1 more
Unauthenticated DoS by Sending Large Filename at File Upload Endpoint in netease-youdao/qanything
CVE-2024-12864
7.5 High
-
netease-youdao netease-youdao/qanything, youdao qanything +1 more
Stored Cross-Site Scripting (XSS) in netease-youdao/QAnything
CVE-2024-8027
6.1 Medium
-
netease-youdao netease-youdao/qanything, youdao qanything +1 more
CORS Misconfiguration in netease-youdao/qanything
CVE-2024-8024
7.5 High
-
netease-youdao netease-youdao/qanything, youdao qanything +1 more
HTTP Request Smuggling in netease-youdao/qanything
CVE-2024-10264
7.5 High
-
netease qanything, netease-youdao netease-youdao/qanything +1 more
SQL Injection in netease-youdao/qanything
CVE-2024-7099
9.8 Critical