xianyu-auto-reply-fix vulnerabilities

CVEs whose affected-version data names the xianyu-auto-reply-fix package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118691Low· 3.7PoC

1w ago

xianyu-auto-reply-fix through 2.0.7 Unauthenticated Message Sending via /send-message

xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the POST /send-message endpoint that allows unauthenticated attackers to send messages from other users' accounts using publicly known default API secr…

▾ TwilightGuDong2003 · xianyu-auto-reply-fixEPSS 0.32%via CVEORG