{"items":[{"id":"CVE-2026-97693","published":"2026-11-04T21:14:50.408Z","updated":"2026-11-04T21:14:50.408Z","title":"Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise","severity":"CRITICAL","score":9.9,"vendor":"xerrors","product":"Yuxi","kev":false,"epss":0.00804,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50561","published":"2026-08-12T14:07:07.584Z","updated":"2026-08-13T16:19:19.494Z","title":"Yuxi has a JWT Authentication Bypass Leading to Cross-Instance Administrator Token Reuse","severity":"CRITICAL","score":9.4,"vendor":"xerrors","product":"Yuxi","kev":false,"epss":0.00682,"kevAdded":null,"exploit":false},{"id":"CVE-2025-14116","published":"2025-12-05T22:32:08.303Z","updated":"2025-12-08T17:14:40.227Z","title":"xerrors Yuxi-Know embed.py OtherEmbedding.aencode server-side request forgery","severity":"MEDIUM","score":5.1,"vendor":"xerrors","product":"Yuxi-Know","kev":false,"epss":0.00281,"kevAdded":null,"exploit":true}]}