Login Request a demo
GZ
Vendor
gz-yami
2 products with CVEs on record
10
CVEs
0
On KEV
10
New 30D
Products
MA
mall4j
gz-yami
9.1
9 CVEs0 on KEV9 new
MA
mall4cloud
gz-yami
6.5
1 CVEs0 on KEV1 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111615
MA
mall4cloud
gz-yami
6.5
0%
Oct 16Mall4cloud through 4.0 IDOR Exposing Buyer Addresses via order_addr Endpoint
CVE-2026-108691
MA
mall4j
gz-yami
5.4
0%
Oct 11mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList
CVE-2026-108690
MA
mall4j
gz-yami
4.3
0%
Oct 11mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList
CVE-2026-102367
MA
mall4j
gz-yami
5.4
0%
Sep 28mall4j through 4.0 Insufficient Session Expiration via Token Refresh
CVE-2026-102366
MA
mall4j
gz-yami
4.4
0%
Sep 28mall4j through 4.0 Unrestricted File Upload in Admin File Endpoints
CVE-2026-102365
MA
mall4j
gz-yami
6.5
0%
Sep 28mall4j through 4.0 Missing Authorization in Admin User Address Endpoints
CVE-2026-102364
MA
mall4j
gz-yami
5.4
0%
Sep 28mall4j through 4.0 Improper Authentication Accepts Storefront Tokens on Admin API
CVE-2026-102363
MA
mall4j
gz-yami
3.7
0%
Sep 28mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number
CVE-2026-102362
MA
mall4j
gz-yami
5.3
0%
Sep 28mall4j through 4.0 Missing Authentication in Product Review Deletion
CVE-2026-102361
MA
mall4j
gz-yami
9.1
0%
Sep 28mall4j through 4.0 Missing Authentication in Password Update Endpoint