litemall · Issues· 55 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #584
[vulnerability] Admin login lacks rate limiting and captcha enforcement (CWE-307)
Updated Sep 12, 2026 - #581
[Vulnerability] Coupon over-claims due to TOCTOU race
Updated Jul 22, 2026 - #580
Hardcoded JWT signing secret allows full account impersonation
Updated Jul 5, 2026 - #571
感谢，测试了三个开源商城，这个是第四个，其它都是引流学习用的，这个是完全可以用的，非常感谢
Updated Jun 30, 2026 - #573
WxAuthController中的profile疑似存在水平越权漏洞
Updated Jan 27, 2026 - #574
WxFeedbackController中的submit接口疑似存在水平越权漏洞
Updated Jan 22, 2026 - #548
[vulnerability] SQL Injection Vulnerability in AdminGoodsController.java
Updated Dec 11, 2025 - #572
太老了，什么时候切换到springboot3
Updated Oct 19, 2025 - #568
Hardcoded JWT Secret Vulnerability in Litemall (≤ v1.8.0) (CWE-798)
Updated Aug 4, 2025 - #567
Stored XSS Vulnerability in /wx/storage/upload (Litemall ≤ v1.8.0)
Updated Jul 28, 2025 - #566
Logic Vulnerability - express fee
Updated Jul 28, 2025 - #565
Unrestricted Upload of File with Dangerous Type (CWE-434)
Updated Jul 28, 2025 - #564
Arbitrary File Deletion Vulnerability in /admin/storage/delete
Updated Jul 28, 2025 - #563
Captcha Brute-force Vulnerability in Litemall (≤ v1.8.0)
Updated Jul 28, 2025 - #561
旧域名 registry.npm.taobao.org 已停用（2022年5月后失效）
Updated Jun 7, 2025