y_project vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20233
3. 20242
4. 20253
5. 20262

Newest CVEs

• CVE-2026-108803

  y_project RuoYi Disable API add changeStatus session expiration

  y_project · RuoYi

  Medium5.3
• CVE-2026-108802

  y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting

  y_project · RuoYi

  Medium5.1
• CVE-2025-14856

  y_project RuoYi getnames code injection

  y_project · RuoYi

  Medium5.3
• CVE-2025-4819

  y_project RuoYi Offline Logout batchForceLogout improper authorization

  y_project · RuoYi

  Low2.3
• CVE-2025-0734

  y_project RuoYi Whitelist getBeanName deserialization

  y_project · RuoYi

  Medium5.1
• CVE-2024-9048

  y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting

  y_project · RuoYi

  Medium6.3
• CVE-2024-6511

  y_project RuoYi Content-Type isJsonRequest cross site scripting

  y_project · RuoYi

  Medium5.3
• CVE-2023-7133

  y_project RuoYi HTTP POST Request login cross site scripting

  y_project · RuoYi

  Medium4.3
• CVE-2023-3815

  y_project RuoYi File Upload uploadFilesPath cross site scripting

  y_project · RuoYi

  Low3.5
• CVE-2023-3163

  y_project RuoYi filterKeyword resource consumption

  y_project · RuoYi

  Low3.5