Yiiframework

    Dashboard / Vendors

    Products: 5
    Vulnerabilities: 28
    Known Exploited: 1
    6
    Critical Level Threats
    9
    High Level Threats
    13
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-48493

    Yii 2 Redis may expose AUTH paramters in logs in case of connection failure

    Last Modified: Sep 18, 2025
    Published: Jun 05, 2025

    CVE-2025-32027

    Yii does not prevent XSS in scenarios where fallback error renderer is used

    Last Modified: Sep 17, 2025
    Published: Apr 10, 2025

    CVE-2024-58136

    Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.

    Last Modified: Nov 05, 2025
    Published: Apr 10, 2025

    CVE-2025-2690

    yiisoft Yii2 MockClass.php generate deserialization

    Last Modified: Mar 24, 2025
    Published: Mar 24, 2025

    CVE-2025-2689

    yiisoft Yii2 SortableIterator.php getIterator deserialization

    Last Modified: Mar 24, 2025
    Published: Mar 24, 2025
    Items Per Page
    Yiiframework Vulnerabilities & Security CVEs | CVE-DB