Vulnerabilities in liangliangyy
9 resultsVexday analysis
O fornecedor liangliangyy apresenta 9 vulnerabilidades registradas na base, todas de severidade não-crítica, com nenhuma sob exploração ativa conhecida. A fraqueza dominante é a codificação de credenciais em código-fonte (CWE-259), indicando práticas inseguras de gestão de segredos, sem novos riscos reportados nos últimos 90 dias.
CVE-2026-6576MEDIUMliangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injectionEPSS 1.5%CVE-2026-6579MEDIUMliangliangyy DjangoBlog Clean Endpoint views.py missing authenticationEPSS 0.4%CVE-2023-2954MEDIUMCross-site Scripting (XSS) - Stored in liangliangyy/djangoblogEPSS 0.4%CVE-2026-6577MEDIUMliangliangyy DjangoBlog logtracks Endpoint views.py missing authenticationEPSS 0.4%CVE-2026-6578MEDIUMliangliangyy DjangoBlog Setting settings.py hard-coded credentialsEPSS 0.3%CVE-2026-6580MEDIUMliangliangyy DjangoBlog Amap API Call views.py hard-coded keyEPSS 0.3%CVE-2026-6610MEDIUMliangliangyy DjangoBlog Setting settings.py hard-coded credentialsEPSS 0.3%CVE-2026-6611LOWliangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded keyEPSS 0.2%CVE-2026-6609MEDIUMliangliangyy DjangoBlog views.py form_valid improper authorizationEPSS 0.2%