youlai has 5 CVEs on record. The busiest recent month was December 2025 with 5. The median CVSS is 4.3 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-266 (5) and CWE-284 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-14052Medium· 6.3A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.035CVE-2025-15087Medium· 4.3A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.024CVE-2025-15086Medium· 4.3A weakness has been identified in youlaitech youlai-mall 1.0.0/2.0.024CVE-2025-15085Medium· 4.3A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.024CVE-2025-15084Low· 3.1A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.017
youlai vulnerabilities
CVEs affecting youlai, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2025-15087Medium· 4.3A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0
A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function submitOrderPayment of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java. Such manip…
CVE-2025-15086Medium· 4.3A weakness has been identified in youlaitech youlai-mall 1.0.0/2.0.0
A weakness has been identified in youlaitech youlai-mall 1.0.0/2.0.0. This impacts the function getMemberByMobile of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java. This manipulation cau…
CVE-2025-15085Medium· 4.3A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0
A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java of the component Bala…
CVE-2025-15084Low· 3.1A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.0
A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.0. The impacted element is the function orderService.payOrder of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java of the c…
CVE-2025-14052Medium· 6.3A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0
A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected by this vulnerability is the function getMemberById of the file /mall-ums/app-api/v1/members/. The manipulation of the argument memberId leads to improper acc…