yiisoft yii2 vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20241
3. 20252
4. 20261

Newest CVEs

• CVE-2026-39850

  Yii 2: Local file inclusion via view parameter name collision

  yiisoft · yii2

  High7.4
• CVE-2025-2690

  yiisoft Yii2 MockClass.php generate deserialization

  yiisoft · Yii2

  Medium5.3
• CVE-2025-2689

  yiisoft Yii2 SortableIterator.php getIterator deserialization

  yiisoft · Yii2

  Medium5.3
• CVE-2024-32877

  Reflected Cross-site Scripting in yiisoft/yii2 Debug mode

  yiisoft · yii2

  Medium4.2
• CVE-2020-15148

  Unsafe deserialization in Yii 2

  yiisoft · yii2

  High8.9