beikeshop vulnerabilities

CVEs whose affected-version data names the beikeshop package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111657Medium· 4.3PoC

yesterday

BeikeShop through 2.0.0.31 IDOR via RMA mark_as_shipped Endpoint

BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsShipped handler of RmaController that allows authenticated customers to modify other customers' returns. Attackers can submit sequential R…

▾ Twilightbeikeshop · beikeshopvia CVEORG