What’s Vulnerable › Products

netease-youdao/qanything vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your netease-youdao/qanything version is affected

Latest netease-youdao/qanything vulnerabilities

• CVE-2026-85671 — QAnything 2.0.0 Unauthenticated Cross-User File Disclosure (CVSS 7.5)
• CVE-2024-8027 — Stored Cross-Site Scripting (XSS) in netease-youdao/QAnything (CVSS 6.1)
• CVE-2024-8024 — CORS Misconfiguration in netease-youdao/qanything (CVSS 7.5)
• CVE-2024-12866 — Local File Inclusion in netease-youdao/qanything (CVSS 7.5)
• CVE-2024-12864 — Unauthenticated DoS by Sending Large Filename at File Upload Endpoint in netease-youdao/qanything (CVSS 7.5)
• CVE-2024-10264 — HTTP Request Smuggling in netease-youdao/qanything (CVSS 9.8)