Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

warehouse — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in warehouse, with AI-generated Chinese analysis, references, and POCs.

Vendor: longpi1

CVE IDTitleCVSSSeverityPublished
CVE-2026-2852 yeqifu warehouse Sales Endpoint SalesController.java deleteSales access control CWE-284 6.3 Medium2026-02-20
CVE-2026-2851 yeqifu warehouse Inport Endpoint InportController.java deleteInport access control CWE-284 6.3 Medium2026-02-20
CVE-2026-2850 yeqifu warehouse Customer Endpoint CustomerController.java deleteCustomer access control CWE-284 6.3 Medium2026-02-20
CVE-2026-2849 yeqifu warehouse Cache Sync CacheController.java syncCache access control CWE-284 5.4 Medium2026-02-20
CVE-2026-2107 yeqifu warehouse Log Info LoginfoController.java batchDeleteLoginfo improper authorization CWE-285 6.3 Medium2026-02-07
CVE-2026-2106 yeqifu warehouse Notice Management NoticeController.java batchDeleteNotice improper authorization CWE-285 6.3 Medium2026-02-07
CVE-2026-2105 yeqifu warehouse Department Management DeptController.java deleteDept improper authorization CWE-285 6.3 Medium2026-02-07
CVE-2026-2079 yeqifu warehouse Menu Management MenuController.java deleteMenu improper authorization CWE-285 6.3 Medium2026-02-07
CVE-2026-2078 yeqifu warehouse Permission Management PermissionController.java deletePermission improper authorization CWE-285 6.3 Medium2026-02-07
CVE-2026-2077 yeqifu warehouse Role Management RoleController.java deleteRole improper authorization CWE-285 6.3 Medium2026-02-07
CVE-2026-2076 yeqifu warehouse User Management Endpoint UserController.java deleteUser improper authorization CWE-285 6.3 Medium2026-02-07
CVE-2026-2075 yeqifu warehouse Role-Permission Binding RoleController.java saveRolePermission access control CWE-284 6.3 Medium2026-02-07
CVE-2026-0574 yeqifu warehouse Request UserController.java saveUserRole improper authorization CWE-285 6.3 Medium2026-01-04
CVE-2026-0571 yeqifu warehouse AppFileUtils.java createResponseEntity path traversal CWE-22 4.3 Medium2026-01-02
CVE-2025-0398 longpi1 warehouse Backend updateInport cross site scripting CWE-79 2.4 Low2025-01-12

All 15 known CVE vulnerabilities affecting warehouse with full Chinese analysis, references, and POCs where available.