Login Request a demo
YO
Product
youlai-mall
by youlaitech · last CVE Oct 14, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 1
Severity
All severities6Critical1High1Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add youlai-mall to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3287
9.8
0%
Feb 27
youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection
Affected: 2.0.0
CVE-2025-15085
8.1
0%
Dec 25
youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization
Affected: 1.0.0; 2.0.0
CVE-2026-110613
6.5
0%
Oct 14
youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List
Affected: de86041995fa3a8b1e959b86232cb9f0bf52ff46 through 9f62de811d478b3ab6b27438efd58e2c4fdb4c31
CVE-2025-15087
4.3
0%
Dec 25
youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization
Affected: 1.0.0; 2.0.0
CVE-2025-15086
4.3
0%
Dec 25
youlaitech youlai-mall MemberController.java getMemberByMobile access control
Affected: 1.0.0; 2.0.0
CVE-2025-15084
3.1
0%
Dec 25
youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control
Affected: 1.0.0; 2.0.0
Showing 6