yiisoft yii2 vulnerabilities
5 published CVEs name yiisoft yii2 among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-39850
Yii 2: Local file inclusion via view parameter name collision
yiisoft · yii2
High7.4 - CVE-2025-2690
yiisoft Yii2 MockClass.php generate deserialization
yiisoft · Yii2
Medium5.3 - CVE-2025-2689
yiisoft Yii2 SortableIterator.php getIterator deserialization
yiisoft · Yii2
Medium5.3 - CVE-2024-32877
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
yiisoft · yii2
Medium4.2 - CVE-2020-15148
Unsafe deserialization in Yii 2
yiisoft · yii2
High8.9