Skip to content
OpenAdvisories

Product · yiisoft

yiisoft/yii2

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2024-4990 EPSS 80%

    Unsafe Reflection in base Component class in yiisoft/yii2

    In yiisoft/yii2 version 2.0.48, the base Component class contains a vulnerability where the `__set()` magic method does not validate that the value passed is a valid Behavior class name or configuration. This allows an attacker to instantiate arbitrary classe…

    yiisoft yiisoft/yii2 yiisoft/yii2 Packagist
  • High 8.1
    CVE-2021-3692

    Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2

    yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

    yiisoft yiisoft/yii2 yiisoft/yii2-dev Packagist
  • High 8.1
    CVE-2021-3689

    Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2

    yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

    yiisoft yiisoft/yii2 yiisoft/yii2-dev Packagist