User-xiangpeng Yaoqishan — known CVE vulnerabilities

Every CVE whose affected-product data names User-xiangpeng Yaoqishan, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-45615 — CVSS 9.8 (critical): Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted…
• CVE-2025-2112 — CVSS 6.3 (medium): A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical…