[ Vendor · 2 CVEs ]

netease-youdao

CVEs affecting netease-youdao published in the last 30 days, plus any netease-youdao CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-112014 18 Oct 2026 CVSS 5.5 netease-youdao LobsterAILobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with…
CVE-2026-108156 9 Oct 2026 CVSS 7.1 netease-youdao LobsterAILobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the…