Medium severity4.7NVD Advisory· Published Aug 4, 2025· Updated Apr 15, 2026
CVE-2025-55014
CVE-2025-55014
Description
The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- www.openwall.com/lists/oss-security/2025/08/08/2nvd
- bugs.debian.org/cgi-bin/bugreport.cginvd
- lists.debian.org/debian-user/2025/08/msg00076.htmlnvd
- lwn.net/SubscriberLink/1032732/3334850da49689e1/nvd
- news.ycombinator.com/itemnvd
- packages.debian.org/trixie/stardictnvd
- packages.debian.org/trixie/stardict-gtknvd
- stardict-4.sourceforge.net/index_en.phpnvd
- www.openwall.com/lists/oss-security/2025/08/04/1nvd
News mentions
0No linked articles in our index yet.