joey-zhou xiaozhi-esp32-server-java

• CVE-2026-111623 Medium 5.6 Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance 0.5%
• CVE-2025-15135 Medium 6.3 joey-zhou xiaozhi-esp32-server-java Cookie AuthenticationInterceptor.java tryAuthenticateWithCookies improper authentication 0.3%
• CVE-2025-3382 Medium 6.3 joey-zhou xiaozhi-esp32-server-java update sql injection 0.3%