yiiframework
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 28 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 30, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Yii 2 Redis may expose AUTH paramters in logs in case of connection failure
Yii does not prevent XSS in scenarios where fallback error renderer is used
Yiiframework Yii Improper Protection of Alternate Path Vulnerability
yiisoft Yii2 MockClass.php generate deserialization
yiisoft Yii2 SortableIterator.php getIterator deserialization
Unsafe Reflection in base Component class in yiisoft/yii2
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation
The Oauth2 PKCE implementation is vulnerable
Unsafe deserialization of user data in yiisoft/yii
Monitor yiiframework in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.