Gz-Yami Mall4j
2 CVEs affecting Gz-Yami Mall4j. Latest disclosed: 2026-09-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-102367 | Medium | 5.4 | 2026-09-29 | mall4j through 4.0 contains an insufficient session expiration vulnerability in the token refresh endpoint that fails to validate the enabled flag when issuing… |
CVE-2026-102363 | Low | 3.7 | 2026-09-29 | mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to re… |