Security
فارسی
All products

yiisoft/yii2

Composer · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Yii 2: Local file inclusion via view parameter name collisionCVE-2026-39850 · GHSA-5VPG-RJ7Q-QPW2 yiisoft/yii2 Composer High Fix reported
Reflected Cross-site Scripting in yiisoft/yii2 Debug modeCVE-2024-32877 · GHSA-QG5R-95M4-MJGJ yiisoft/yii2 Composer Medium Fix reported
Unsafe deserialization in Yii 2CVE-2020-15148 · GHSA-699Q-WCFF-G9MJ yiisoft/yii2 Composer High Fix reported
yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array KeyCVE-2024-58136 · GHSA-GGWG-CMWP-46R5 yiisoft/yii2 Composer Critical Fix reported
Unsafe Reflection in base Component class in yiisoft/yii2CVE-2024-4990 · GHSA-CJCC-P67M-7QXM yiisoft/yii2 Composer High Fix reported
Yii Framework Cross-site Scripting VulnerabilityCVE-2015-3397 · GHSA-W2XX-JP9F-GP8G yiisoft/yii2-bootstrapyiisoft/yii2-dev Composer Medium Fix reported
Yii SQL injection vulnerabilityCVE-2018-7269 · GHSA-HHG2-G6H6-C266Version ranges need review. yiisoft/yii2-devyiisoft/yii2 Composer Critical Fix reported
Yii Cross-site Scripting Framework vulnerabilityCVE-2017-11516 · GHSA-4C64-W8FG-XCQ2 yiisoft/yii2-devyiisoft/yii2 Composer Medium Fix reported
Yii Framework Cross-Site Request Forgery (CSRF)CVE-2018-6009 · GHSA-CWHM-272P-3WJ9Version ranges need review. yiisoft/yii2-devyiisoft/yii2 Composer High Fix reported
Yii Framework reflected Cross-site ScriptingCVE-2018-6010 · GHSA-8GFQ-C54M-3RF6Version ranges need review. yiisoft/yii2-devyiisoft/yii2 Composer High Fix reported
Yii Framework Reflected XSSCVE-2017-7271 · GHSA-4XH9-5VH8-3P58 yiisoft/yii2 Composer Medium Fix reported
Yii2 allows attackers to execute any local .php file via a relative path in the view parameterCVE-2015-5467 · GHSA-7CFQ-72W2-24Q4Version ranges need review. yiisoft/yii2-devyiisoft/yii2 Composer Critical Fix reported
Yii Incorrectly Implements CORSCVE-2018-20745 · GHSA-CR6R-6XM9-WW22 yiisoft/yii2 Composer Medium Fix reported