YunaiV vulnerabilities

CVEs per yearBy the year they were published

1. 20257
2. 202619

Newest CVEs

• CVE-2026-116007

  YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication

  YunaiV · ruoyi-vue-pro

  Medium6.3
• CVE-2026-116006

  YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication

  YunaiV · ruoyi-vue-pro

  Medium6.9
• CVE-2026-116016

  yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header

  YunaiV · yudao-cloud

  High7.1
• CVE-2026-116015

  yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint

  YunaiV · yudao-cloud

  Medium5.3
• CVE-2026-110610

  ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl

  YunaiV · ruoyi-vue-pro

  Medium5.3
• CVE-2026-97325

  YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect

  YunaiV · ruoyi-vue-pro

  Medium5.3
• CVE-2026-97324

  YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization

  YunaiV · ruoyi-vue-pro

  Medium6.9
• CVE-2026-97323

  YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal

  YunaiV · ruoyi-vue-pro

  Medium5.3
• CVE-2026-97322

  YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting

  YunaiV · ruoyi-vue-pro

  Medium5.3
• CVE-2026-97321

  YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection

  YunaiV · ruoyi-vue-pro

  Medium5.3