Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

yiisoft

yiisoft yii2 vulnerabilities

5 published CVEs name yiisoft yii2 among the affected products.

Newest CVEs

  • CVE-2026-39850

    Yii 2: Local file inclusion via view parameter name collision

    yiisoft · yii2

    High7.4
  • CVE-2025-2690

    yiisoft Yii2 MockClass.php generate deserialization

    yiisoft · Yii2

    Medium5.3
  • CVE-2025-2689

    yiisoft Yii2 SortableIterator.php getIterator deserialization

    yiisoft · Yii2

    Medium5.3
  • CVE-2024-32877

    Reflected Cross-site Scripting in yiisoft/yii2 Debug mode

    yiisoft · yii2

    Medium4.2
  • CVE-2020-15148

    Unsafe deserialization in Yii 2

    yiisoft · yii2

    High8.9