Skip to content
OpenAdvisories

Vendor

GuDong2003

1 known vulnerabilities.

Products

xianyu-auto-reply-fix 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-118691

    xianyu-auto-reply-fix through 2.0.7 Unauthenticated Message Sending via /send-message

    xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the POST /send-message endpoint that allows unauthenticated attackers to send messages from other users' accounts using publicly known default API secrets. Attackers can sup…

    GuDong2003 xianyu-auto-reply-fix