Skip to content
OpenAdvisories

Vendor

XianYuLauncher

1 known vulnerabilities.

Products

XianYuLauncher 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-48991

    XianYuLauncher: Legacy Microsoft account OAuth sign-in flow lacks PKCE and state validation

    XianYuLauncher is a Minecraft Java Edition launcher. In versions prior to 1.5.5, sensitive authentication artifacts could be exposed during a user-initiated login under certain local attack conditions. Affected versions relied on a fixed localhost redirect UR…

    XianYuLauncher XianYuLauncher