Issues

• [vulnerability] Admin login lacks rate limiting and captcha enforcement (CWE-307)

  linlinjava/litemall#584 · Filter by author s1mple-top opened on Sep 12, 2026

• [Vulnerability] Coupon over-claims due to TOCTOU race

  linlinjava/litemall#581 · Filter by author Leeziao opened on Jul 22, 2026

• Hardcoded JWT signing secret allows full account impersonation

  linlinjava/litemall#580 · Filter by author geo-chen opened on Jul 5, 2026

• WxFeedbackController中的submit接口疑似存在水平越权漏洞

  linlinjava/litemall#574 · Filter by author kingkingkingson opened on Jan 22, 2026

• WxAuthController中的profile疑似存在水平越权漏洞

  linlinjava/litemall#573 · Filter by author kingkingkingson opened on Jan 22, 2026
  2

• 太老了，什么时候切换到springboot3

  linlinjava/litemall#572 · Filter by author eaglewangy opened on Oct 19, 2025

• 感谢，测试了三个开源商城，这个是第四个，其它都是引流学习用的，这个是完全可以用的，非常感谢

  linlinjava/litemall#571 · Filter by author allovine opened on Oct 15, 2025
  1

• Hardcoded JWT Secret Vulnerability in Litemall (≤ v1.8.0) (CWE-798)

  linlinjava/litemall#568 · Filter by author ez-lbz opened on Aug 4, 2025

• Stored XSS Vulnerability in /wx/storage/upload (Litemall ≤ v1.8.0)

  linlinjava/litemall#567 · Filter by author ez-lbz opened on Jul 28, 2025

• Logic Vulnerability - express fee

  linlinjava/litemall#566 · Filter by author NinjaGPT opened on Jul 28, 2025

• Unrestricted Upload of File with Dangerous Type (CWE-434)

  linlinjava/litemall#565 · Filter by author NinjaGPT opened on Jul 28, 2025

• Arbitrary File Deletion Vulnerability in /admin/storage/delete

  linlinjava/litemall#564 · Filter by author ez-lbz opened on Jul 28, 2025

• Captcha Brute-force Vulnerability in Litemall (≤ v1.8.0)

  linlinjava/litemall#563 · Filter by author ez-lbz opened on Jul 28, 2025

• 旧域名 registry.npm.taobao.org 已停用（2022年5月后失效）

  linlinjava/litemall#561 · Filter by author misxzaiz opened on Jun 7, 2025

• 是否应该避免用关键字做字段

  linlinjava/litemall#558 · Filter by author xieningqing opened on Nov 16, 2024
  1

• [vulnerability] SQL Injection Vulnerability in AdminOrderController.java

  linlinjava/litemall#552 · Filter by author x0blank opened on Aug 31, 2024

• vue项目启动报错

  linlinjava/litemall#549 · Filter by author SuperMonkeyC opened on Jul 12, 2024
  3

• [vulnerability] SQL Injection Vulnerability in AdminGoodsController.java

  linlinjava/litemall#548 · Filter by author xiao-maqiang opened on Jun 23, 2024
  1

• 账号密码不正确

  linlinjava/litemall#546 · Filter by author summerendha opened on Apr 5, 2024

• Bugs in negated instanceof expressions

  linlinjava/litemall#542 · Filter by author gorosgobe opened on Sep 20, 2023

• 验证码图片为什么是后端生成？

  linlinjava/litemall#537 · Filter by author haohonglong opened on May 12, 2023
  2

• 登录后端页面密码错误

  linlinjava/litemall#536 · Filter by author Lalisaaaaaaaa opened on Apr 19, 2023

• 点击登入后 系统内部错误502，请联系管理员维护:v1.8.0 遇到同样的问题：报错如下

  linlinjava/litemall#535 · Filter by author haohonglong opened on Apr 8, 2023
  1

• litemall-admin页面打开报错

  linlinjava/litemall#528 · Filter by author xiaoroll opened on Dec 16, 2022

• Using predictable/constant cryptographic key when creating or verifing Json Web Token.

  linlinjava/litemall#526 · Filter by author KANIXB opened on Dec 1, 2022