y
yourls
Security Risk Profile
45
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 24, 2011 to present
10
Total CVEs
4
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
45/100
medium
📈 1 in Last 30 Days
Severity Distribution
Critical
1High
3Medium
6Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
5
2
CSRF
3
3
Path Traversal
1
4
Code Injection
1
5
Infoleak
1
Most Affected Products
1. composer/yourls/yourls16
2. Yourls Yourls10
3. Fedoraproject Fedora3
Recent Vulnerabilities
See more →CVE-2026-62858
CVSS 5.3medium
YOURLS: Unauthenticated File Inclusion
Oct 14, 2026
CVE-2026-63135
CVSS 8.2high
YOURLS has stored XSS in referrer statistics chart via crafted Referer header
Aug 21, 2026
CVE-2022-0088
CVSS 7.4high
Cross-Site Request Forgery in YOURLS
Apr 3, 2022🔧 No Patch
CVE-2021-3785
CVSS 5.4medium
Cross-site Scripting in yourls
Sep 15, 2021
CVE-2021-3783
CVSS 6.1medium
Cross-site Scripting in yourls
Sep 15, 2021
CVE-2021-3734
CVSS 8.8high
Improper Restriction of Rendered UI Layers or Frames in yourls
Aug 26, 2021🔧 No Patch
CVE-2020-27388
CVSS 5.4medium
YOURLS Stored Cross Site Scripting (XSS)
Oct 23, 2020
CVE-2019-14537
CVSS 9.8critical
Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls
Aug 7, 2019
CVE-2014-8488
CVSS 4.3medium
Dec 10, 2014🔧 No Patch
CVE-2011-3824
CVSS 5.0medium
Sep 24, 2011🔧 No Patch
Monitor yourls in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.