yiiframework
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 28 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 30, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Yii 2 Redis may expose AUTH parameters in logs in case of connection failure
Yii does not prevent XSS in scenarios where fallback error renderer is used
yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key
yiisoft Yii2 MockClass.php generate deserialization
yiisoft Yii2 SortableIterator.php getIterator deserialization
Unsafe Reflection in base Component class in yiisoft/yii2
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation
yiisoft/yii2-authclient's Oauth2 PKCE implementation is vulnerable
yiisoft/yii deserializing untrusted user input can lead to remote code execution
Monitor yiiframework in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.