Vulnerabilities

TI-2026-02838 CVE-2026-3287 · GHSA-7mf8-hqh9-29fx

youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection

MEDIUM 57

A security flaw has been discovered in youlaitech youlai-mall 2.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0043 Published 2026-02-27 No fix listed CWE-74

TI-2025-13765 CVE-2025-15087 · GHSA-w9p6-fhvw-j42q

MEDIUM 57

A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00269 Published 2025-12-25 No fix listed CWE-266

TI-2025-13764 CVE-2025-15086 · GHSA-3jrf-74h9-v6jf

MEDIUM 57

A weakness has been identified in youlaitech youlai-mall 1.0.0/2.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.003 Published 2025-12-25 No fix listed CWE-266

TI-2025-13763 CVE-2025-15085 · GHSA-g7fx-r7wp-m8cx

MEDIUM 57

A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00303 Published 2025-12-25 No fix listed CWE-266

TI-2025-13762 CVE-2025-15084 · GHSA-gjff-p6ff-7g4f

MEDIUM 45

A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.0.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00287 Published 2025-12-25 No fix listed CWE-266

TI-2025-12871 CVE-2025-14086 · GHSA-7v27-q387-jpxv

MEDIUM 57

A vulnerability was found in youlaitech youlai-mall 1.0.0/2.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00343 Published 2025-12-05 No fix listed CWE-266

TI-2025-12870 CVE-2025-14085 · GHSA-xgpm-xf5g-45m5

MEDIUM 57

A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00435 Published 2025-12-05 No fix listed CWE-913

TI-2025-12840 CVE-2025-14052 · GHSA-ww8c-xjp4-29q3

LOW 24

A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00279 Published 2025-12-05 No fix listed CWE-266

TI-2025-12839 CVE-2025-14051 · GHSA-rc65-2j52-4wcg

MEDIUM 57

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00515 Published 2025-12-04 No fix listed CWE-913