Skip to content
OpenAdvisories

Vendor

xerrors

3 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Critical 9.9

    Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise

    Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there is insufficient isolation between execution-capable Docker sandboxes and trusted application services. A low-privileged …

  • Critical 9.4

    Yuxi has a JWT Authentication Bypass Leading to Cross-Instance Administrator Token Reuse

    Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity…