<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: youlaitech-youlai-mall</title><description>Every new CVE for youlaitech-youlai-mall.</description><link>https://agentprime.io/</link><item><title>CVE-2026-110613: youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List</title><link>https://agentprime.io/advisories/CVE-2026-110613/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110613/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 14:16:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3287: youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection</title><link>https://agentprime.io/advisories/CVE-2026-3287/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3287/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 04:02:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15087: youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization</title><link>https://agentprime.io/advisories/CVE-2025-15087/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15087/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Dec 2025 21:02:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15086: youlaitech youlai-mall MemberController.java getMemberByMobile access control</title><link>https://agentprime.io/advisories/CVE-2025-15086/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15086/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Dec 2025 20:32:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15085: youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization</title><link>https://agentprime.io/advisories/CVE-2025-15085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15085/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Dec 2025 19:32:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15084: youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control</title><link>https://agentprime.io/advisories/CVE-2025-15084/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15084/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Dec 2025 18:32:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14086: youlaitech youlai-mall openid access control</title><link>https://agentprime.io/advisories/CVE-2025-14086/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14086/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Dec 2025 14:02:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14085: youlaitech youlai-mall orders improper control of dynamically-identified variables</title><link>https://agentprime.io/advisories/CVE-2025-14085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14085/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Dec 2025 14:02:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14052: youlaitech youlai-mall members getMemberById access control</title><link>https://agentprime.io/advisories/CVE-2025-14052/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14052/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Dec 2025 00:02:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14051: youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables</title><link>https://agentprime.io/advisories/CVE-2025-14051/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14051/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Dec 2025 22:32:06 GMT</pubDate><category>CVE</category></item></channel></rss>