CVE-2025-46743

An authenticated user's token could be used by another source after the user had logged out prior to the token expiring...

CVE-2024-57433

macrozheng mall-tiny version 1.0.1 is vulnerable to Incorrect Access Control within the logout function. The root cause is that a user's session token remains valid and available after they have logged out, allowing the token to continue fetching information in a logged-in state. As a temporary w...