Whyour vulnerabilities
We track 1 vulnerability in Whyour products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2026.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Whyour vulnerabilities
- 9.3 Critical severity
qinglong: Improper Authentication
Qinglong is a timed task management platform supporting Python3, JavaScript, Shell, and Typescript. Prior to 2.20.1, the init guard middleware in back/loaders/express.ts checks /api/user/init but not /open/user/init, while rewrite('/open/*', '/api/$1') rewrite