Login Request a demo
YO
Product
Youlai-mall
by Youlai · last CVE Feb 27, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 4Medium 3Low 1
Severity
All severities9Critical1High4Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Youlai-mall to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3287
9.8
0%
Feb 27
youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection
Affected: 2.0.0
CVE-2025-14086
8.8
0%
Dec 5
youlaitech youlai-mall openid access control
Affected: 1.0.0; 2.0.0
CVE-2025-14085
8.8
0%
Dec 5
youlaitech youlai-mall orders improper control of dynamically-identified variables
Affected: 1.0.0; 2.0.0
CVE-2025-14051
8.8
0%
Dec 4
youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables
Affected: 1.0.0; 2.0.0
CVE-2025-15085
8.1
0%
Dec 25
youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization
Affected: 1.0.0; 2.0.0
CVE-2025-14052
6.5
0%
Dec 5
youlaitech youlai-mall members getMemberById access control
Affected: 1.0.0; 2.0.0
CVE-2025-15087
4.3
0%
Dec 25
youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization
Affected: 1.0.0; 2.0.0
CVE-2025-15086
4.3
0%
Dec 25
youlaitech youlai-mall MemberController.java getMemberByMobile access control
Affected: 1.0.0; 2.0.0
CVE-2025-15084
3.1
0%
Dec 25
youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control
Affected: 1.0.0; 2.0.0
Showing 9