Skip to content
OpenAdvisories

Vendor

whyour

2 known vulnerabilities.

Products

qinglong 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-55445

    Qinglong: Incomplete fix for CVE-2026-3965: Improper Authentication

    Qinglong is a timed task management platform supporting Python3, JavaScript, Shell, and Typescript. Prior to 2.20.1, the init guard middleware in back/loaders/express.ts checks /api/user/init but not /open/user/init, while rewrite('/open/*', '/api/$1') rewrit…

    whyour qinglong @whyour/qinglong npm