- Known vulnerabilities
- 0
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- —
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Based on permissions only: no CVE data referenced for this app.
Known vulnerabilities (CVE)
No CVE is currently referenced in NVD for this app on its platform.
The absence of CVEs is not a security guarantee — it can also mean nobody has audited or published findings.
Context
Context
Description
◆ 85 MILLION USERS ◆ Yuka is a free mobile app that allows you to scan the barcodes of food and personal care products and instantly see their impact on your health. A rating and detailed information help you understand the analysis of each product. When a product has a negative impact on your health, Yuka also recommends similar but healthier alternative products. ◆ A 100% INDEPENDENT PROJECT ◆ Yuka is a 100% independent project : product reviews and recommendations of healthier alternatives are done in an objective way. No brand or manufacturer can influence them in one way or another. Furthermore, there is no in-app advertising. You can access detailed information on our business model on our website (www.yuka.io). ◆ 6 MILLION REFERENCED PRODUCTS ◆ Yuka established a database that contains 4 million food products and 2 million cosmetic products. Each food product is evaluated according to 3 objective criteria: nutritional quality, presence of additives and organic aspect of the product. The method to analyse cosmetic products is based on the analysis of all the ingredients of the product. Each ingredient is assigned a risk level according to the latest scientific data.
Data collected and shared
Source: App Store · App Privacy · 3 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
FAQ
FAQ: Yuka
Why are no CVEs listed for Yuka?
No CVE is currently referenced in NVD for Yuka (yuca.scanner) with a iOS CPE configuration. Either none has been publicly disclosed, or none has been mapped yet. Absence of a CVE is not a security guarantee.
What is the latest known version of Yuka?
The most recent version of Yuka (yuca.scanner) tracked by Appaloosa Scout is 5.2, published by Yuca.