Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Guchengwuyue CVE-2026-109173
yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject invoices via POST /ad
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Guchengwuyue CVE-2026-109172
yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject receivables records b
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Guchengwuyue CVE-2026-109171
yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject contracts by calling
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Guchengwuyue guchengwuyue-2026-10
Guchengwuyue Security Releases - October 2026
6 CVEs and 6 credit lines. None claimed yet.
0 of 6 credit lines claimed Claim credit