Skip to content
OpenAdvisories

Package · Packagist

yiisoft/yii2-dev

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-2689

    yiisoft Yii2 SortableIterator.php getIterator deserialization

    A vulnerability, which was classified as critical, has been found in yiisoft Yii2 up to 2.0.45. Affected by this issue is the function getIterator of the file symfony\finder\Iterator\SortableIterator.php. The manipulation leads to deserialization. The attack …

    yiisoft yii2 yiisoft/yii2-dev Packagist
  • Medium 6.1
    CVE-2017-11516

    Yii Cross-site Scripting Framework vulnerability

    An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled.

    yiisoft/yii2 yiisoft/yii2-dev Packagist