YO
Vendor
youlaitech
5
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110613 | YO youlai-mall youlaitech | 6.5 | Oct 14 | youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List |
| CVE-2026-110216 | YO youlai-boot youlaitech | 7.1 | Oct 13 | youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint |
| CVE-2026-110215 | YO youlai-boot youlaitech | 8.8 | Oct 13 | youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation |
| CVE-2026-7672 | YO youlai-boot youlaitech | 6.3 | May 3 | youlaitech youlai-boot Users Endpoint UserController.java getUserList sql injection |
| CVE-2026-3287 | YO youlai-mall youlaitech | 9.8 | Feb 27 | youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection |
