youlaitech vulnerabilities

CVEs per yearBy the year they were published

1. 20259
2. 20265

Newest CVEs

• CVE-2026-110613

  youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List

  youlaitech · youlai-mall

  High7.1
• CVE-2026-110216

  youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint

  youlaitech · youlai-boot

  High7.1
• CVE-2026-110215

  youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation

  youlaitech · youlai-boot

  High8.7
• CVE-2026-7672

  youlaitech youlai-boot Users Endpoint UserController.java getUserList sql injection

  youlaitech · youlai-boot

  Medium5.3
• CVE-2026-3287

  youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection

  youlaitech · youlai-mall

  Medium5.3
• CVE-2025-15372

  youlaitech vue3-element-admin Notice index.vue cross site scripting

  youlaitech · vue3-element-admin

  Medium4.8
• CVE-2025-15087

  youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization

  youlaitech · youlai-mall

  Medium5.3
• CVE-2025-15086

  youlaitech youlai-mall MemberController.java getMemberByMobile access control

  youlaitech · youlai-mall

  Medium5.3
• CVE-2025-15085

  youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization

  youlaitech · youlai-mall

  Medium5.3
• CVE-2025-15084

  youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control

  youlaitech · youlai-mall

  Low2.3