← All credits

Yaqi Chao

145 vulnerability records and advisories credit this contributor.

CVE-2026-108866

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths

CVE-2026-108704

CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints

CVE-2026-108691

mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList

CVE-2026-108679

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncement

CVE-2026-108644

JeecgBoot through 3.9.5 Missing Authorization via /sys/category/delete

CVE-2026-108669

JeecgBoot through 3.9.5 Missing Authorization via /airag/knowledge/embedding/search

CVE-2026-108664

JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/queryById

CVE-2026-108659

JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/listPackByTenantUserId

CVE-2026-108654

JeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById

CVE-2026-108649

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRolesById