← All credits

Yaqi Chao

145 vulnerability records and advisories credit this contributor.

CVE-2026-108703

CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push

CVE-2026-108690

mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList

CVE-2026-108678

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles

CVE-2026-108673

JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/exportXls

CVE-2026-108668

JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteRecycleBin

CVE-2026-108663

JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApply

CVE-2026-108658

JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/queryTenantAuthInfo

CVE-2026-108653

JeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list

CVE-2026-108648

JeecgBoot through 3.9.5 Missing Authorization via getDynamicDbSourceByCode Endpoint

CVE-2026-108643

JeecgBoot through 3.9.5 Missing Authorization via /sys/category/deleteBatch