{"id":"CVE-2025-55014","details":"The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP.","modified":"2026-04-16T04:42:06.367885747Z","published":"2025-08-04T20:15:31Z","references":[{"type":"WEB","url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110370"},{"type":"WEB","url":"https://lists.debian.org/debian-user/2025/08/msg00076.html"},{"type":"WEB","url":"https://packages.debian.org/trixie/stardict"},{"type":"WEB","url":"https://packages.debian.org/trixie/stardict-gtk"},{"type":"WEB","url":"https://stardict-4.sourceforge.net/index_en.php"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2025/08/04/1"},{"type":"WEB","url":"https://lwn.net/SubscriberLink/1032732/3334850da49689e1/"},{"type":"WEB","url":"https://news.ycombinator.com/item?id=44872313"}],"schema_version":"1.7.5"}