Lycheeorg

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 21
    Known Exploited: 0
    0
    Critical Level Threats
    4
    High Level Threats
    7
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-77466

    Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection

    Last Modified: Oct 23, 2026
    Published: Oct 15, 2026

    CVE-2026-77470

    Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST request

    Last Modified: Oct 18, 2026
    Published: Oct 15, 2026

    CVE-2026-77468

    Lychee: Missing Authentication for Critical Function and Allocation of Resources Without Limits or Throttling on /docs/api

    Last Modified: Oct 28, 2026
    Published: Oct 15, 2026

    CVE-2026-77467

    Lychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the real processing path

    Last Modified: Oct 23, 2026
    Published: Oct 15, 2026

    CVE-2026-62679

    Lychee: Path traversal in `SecurePathController` allows authenticated arbitrary file read

    Last Modified: Oct 17, 2026
    Published: Oct 15, 2026
    Items Per Page
    Lycheeorg Vulnerabilities & Security CVEs | CVE-DB